{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-23257", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-01-13T15:37:45.990Z", "datePublished": "2026-03-18T17:41:04.078Z", "dateUpdated": "2026-03-18T17:41:04.078Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-03-18T17:41:04.078Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup\n\nIn setup_nic_devices(), the initialization loop jumps to the label\nsetup_nic_dev_free on failure. The current cleanup loop while(i--)\nskip the failing index i, causing a memory leak.\n\nFix this by changing the loop to iterate from the current index i\ndown to 0.\n\nAlso, decrement i in the devlink_alloc failure path to point to the\nlast successfully allocated index.\n\nCompile tested only. Issue found using code review."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/cavium/liquidio/lio_main.c"], "versions": [{"version": "f21fb3ed364bb83533c5efe19354e337ea9ecda9", "lessThan": "af38d9a5cb49fe9d0d282b44f17fdc1f3270d99d", "status": "affected", "versionType": "git"}, {"version": "f21fb3ed364bb83533c5efe19354e337ea9ecda9", "lessThan": "d86c58eb005eb99da402452f3db7a6e0eae32815", "status": "affected", "versionType": "git"}, {"version": "f21fb3ed364bb83533c5efe19354e337ea9ecda9", "lessThan": "f1216b80c9040a904d2ad7c8cd24ca0ff1f36932", "status": "affected", "versionType": "git"}, {"version": "f21fb3ed364bb83533c5efe19354e337ea9ecda9", "lessThan": "a0d2389c8cdc1f05de5eb8663bffe9ed05dca769", "status": "affected", "versionType": "git"}, {"version": "f21fb3ed364bb83533c5efe19354e337ea9ecda9", "lessThan": "f86bd16280a0f88b538394e0565c56ce4756da99", "status": "affected", "versionType": "git"}, {"version": "f21fb3ed364bb83533c5efe19354e337ea9ecda9", "lessThan": "293eaad0d6d6b2a37a458c7deb7be345349cd963", "status": "affected", "versionType": "git"}, {"version": "f21fb3ed364bb83533c5efe19354e337ea9ecda9", "lessThan": "8558aef4e8a1a83049ab906d21d391093cfa7e7f", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/cavium/liquidio/lio_main.c"], "versions": [{"version": "4.2", "status": "affected"}, {"version": "0", "lessThan": "4.2", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.250", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.200", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.163", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.124", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.70", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.10", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "5.10.250"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "5.15.200"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "6.1.163"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "6.6.124"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "6.12.70"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "6.18.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "6.19"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/af38d9a5cb49fe9d0d282b44f17fdc1f3270d99d"}, {"url": "https://git.kernel.org/stable/c/d86c58eb005eb99da402452f3db7a6e0eae32815"}, {"url": "https://git.kernel.org/stable/c/f1216b80c9040a904d2ad7c8cd24ca0ff1f36932"}, {"url": "https://git.kernel.org/stable/c/a0d2389c8cdc1f05de5eb8663bffe9ed05dca769"}, {"url": "https://git.kernel.org/stable/c/f86bd16280a0f88b538394e0565c56ce4756da99"}, {"url": "https://git.kernel.org/stable/c/293eaad0d6d6b2a37a458c7deb7be345349cd963"}, {"url": "https://git.kernel.org/stable/c/8558aef4e8a1a83049ab906d21d391093cfa7e7f"}], "title": "net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup\n\nIn setup_nic_devices(), the initialization loop jumps to the label\nsetup_nic_dev_free on failure. The current cleanup loop while(i--)\nskip the failing index i, causing a memory leak.\n\nFix this by changing the loop to iterate from the current index i\ndown to 0.\n\nAlso, decrement i in the devlink_alloc failure path to point to the\nlast successfully allocated index.\n\nCompile tested only. Issue found using code review."}], "id": "CVE-2026-23257", "lastModified": "2026-03-19T13:25:00.570", "metrics": {}, "published": "2026-03-18T18:16:23.997", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/293eaad0d6d6b2a37a458c7deb7be345349cd963"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/8558aef4e8a1a83049ab906d21d391093cfa7e7f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a0d2389c8cdc1f05de5eb8663bffe9ed05dca769"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/af38d9a5cb49fe9d0d282b44f17fdc1f3270d99d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d86c58eb005eb99da402452f3db7a6e0eae32815"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f1216b80c9040a904d2ad7c8cd24ca0ff1f36932"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f86bd16280a0f88b538394e0565c56ce4756da99"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Awaiting Analysis"}

{"bugzilla": {"description": "kernel: net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup", "id": "2448701", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448701"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "details": ["No description is available for this CVE."], "name": "CVE-2026-23257", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-03-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-23257\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-23257\nhttps://lore.kernel.org/linux-cve-announce/2026031818-CVE-2026-23257-bd18@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f21fb3ed364bb83533c5efe19354e337ea9ecda9,af38d9a5cb49fe9d0d282b44f17fdc1f3270d99d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f21fb3ed364bb83533c5efe19354e337ea9ecda9,d86c58eb005eb99da402452f3db7a6e0eae32815)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f21fb3ed364bb83533c5efe19354e337ea9ecda9,f1216b80c9040a904d2ad7c8cd24ca0ff1f36932)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f21fb3ed364bb83533c5efe19354e337ea9ecda9,a0d2389c8cdc1f05de5eb8663bffe9ed05dca769)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f21fb3ed364bb83533c5efe19354e337ea9ecda9,f86bd16280a0f88b538394e0565c56ce4756da99)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f21fb3ed364bb83533c5efe19354e337ea9ecda9,293eaad0d6d6b2a37a458c7deb7be345349cd963)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f21fb3ed364bb83533c5efe19354e337ea9ecda9,8558aef4e8a1a83049ab906d21d391093cfa7e7f)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.2"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.2)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.250,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.200,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.163,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.124,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.70,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.10,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.19,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "analysis": {"en": {"generated_at": "2026-03-27T11:51:05.317979+00:00", "value": {"mitigation_remediation": ["Apply a kernel update containing the liquidio off\u2011by\u2011one fix shown in the referenced commit logs.", "Reboot the system after the update to reload the driver.", "Verify the running kernel version to confirm the presence of the fix.", "Monitor system memory and network device activity for signs of continued leaks.", "If an update is unavailable, consider disabling the liquidio interface or restricting privileges that trigger device allocation until a patch is applied."], "summary": {"action": "Apply Patch", "impact": "Memory Leak leading to resource exhaustion"}, "threat_synthesis": {"affected_systems": "The flaw exists in the pool\u2011fabric (PF) support of the liquidio network driver within the Linux kernel. The advisory does not specify which kernel releases are affected; however, any kernel build that did not incorporate the referenced patch commit remains vulnerable. Administrators should review their kernel version against the commit list linked in the references to determine eligibility for the fix.", "description_and_impact": "An off\u2011by\u2011one error in the Linux kernel\u2019s liquidio driver causes the cleanup routine to skip the last allocated network device when failure occurs, which results in a memory leak. Over time the unreleased memory accumulates, potentially exhausting system memory and degrading kernel performance. While the advisory does not confirm a direct denial of service, the leakage could impinge on overall system stability if the condition repeats.", "risk_and_exploitability": "The CVSS score of 5.5 indicates moderate severity, and the EPSS score of less than 1% suggests a low likelihood of exploitation. Because the bug resides in code executed during device initialization, the attack vector is inferred to be local with privileged kernel access. No public exploit is documented, and the vulnerability is not present in the CISA KEV catalog, which collectively limits immediate threat but still warrants timely mitigation to avoid potential resource exhaustion."}}}}, "created": "2026-03-19T08:56:09.768723+00:00", "updated": "2026-03-27T15:48:22.562326+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-772"]}