CVE-2026-23019: net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
In the Linux kernel, the following vulnerability has been resolved:
net: marvell: prestera: fix NULL dereference on devlinkalloc() failure
devlinkalloc() may return NULL on allocation failure, but presteradevlinkalloc() unconditionally calls devlinkpriv() on the returned pointer.
This leads to a NULL pointer dereference if devlink allocation fails. Add a check for a NULL devlink pointer and return NULL early to avoid the crash.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23019?
CVE-2026-23019 is classified as a moderate severity vulnerability in the Linux kernel.
How does CVE-2026-23019 affect system stability?
CVE-2026-23019 may cause a NULL dereference leading to potential system crashes when devlink_alloc() fails.
How do I fix CVE-2026-23019?
To fix CVE-2026-23019, you should update to the latest patched version of the Linux kernel provided by your distribution.
Which systems are affected by CVE-2026-23019?
CVE-2026-23019 affects systems running vulnerable versions of the Linux kernel containing the prestera driver.
Is CVE-2026-23019 remotely exploitable?
CVE-2026-23019 is not considered remotely exploitable, but it can affect local system stability.