CVE-2026-23257: net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup
In the Linux kernel, the following vulnerability has been resolved:
net: liquidio: Fix off-by-one error in PF setupnicdevices() cleanup
In setupnicdevices(), the initialization loop jumps to the label setupnicdevfree on failure. The current cleanup loop while(i--) skip the failing index i, causing a memory leak.
Fix this by changing the loop to iterate from the current index i down to 0.
Also, decrement i in the devlinkalloc failure path to point to the last successfully allocated index.
Compile tested only. Issue found using code review.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23257?
CVE-2026-23257 has been classified as a medium severity vulnerability.
How do I fix CVE-2026-23257?
To fix CVE-2026-23257, update your Linux kernel to the latest patched version that resolves the vulnerability.
What impact does CVE-2026-23257 have on my system?
CVE-2026-23257 can lead to a potential denial of service due to an off-by-one error.
Which versions of Linux kernel are affected by CVE-2026-23257?
CVE-2026-23257 affects the Linux kernel prior to the application of the relevant fix.
Is CVE-2026-23257 likely to be exploited?
While the exploitability of CVE-2026-23257 is not explicitly stated, vulnerabilities with off-by-one errors can often be exploited if not patched.