CVE-2026-23256: net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup
In the Linux kernel, the following vulnerability has been resolved:
net: liquidio: Fix off-by-one error in VF setupnicdevices() cleanup
In setupnicdevices(), the initialization loop jumps to the label setupnicdevfree on failure. The current cleanup loop while(i--) skip the failing index i, causing a memory leak.
Fix this by changing the loop to iterate from the current index i down to 0.
Compile tested only. Issue found using code review.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23256?
CVE-2026-23256 has a low severity rating due to its nature as an off-by-one error.
How do I fix CVE-2026-23256?
To fix CVE-2026-23256, update your Linux kernel to the latest version where the vulnerability has been patched.
What software is affected by CVE-2026-23256?
CVE-2026-23256 affects the Linux kernel, particularly in the net: liquidio component.
What type of issue is CVE-2026-23256?
CVE-2026-23256 is an off-by-one error that occurs during the VF setup_nic_devices() cleanup.
Is CVE-2026-23256 a critical vulnerability?
No, CVE-2026-23256 is not classified as a critical vulnerability due to its low impact on system security.