{"id":"CVE-2026-23256","title":"net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup\n\nIn setup_nic_devices(), the initialization loop jumps to the label\nsetup_nic_dev_free on failure.…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < bd680e56e316be92c01568be98d85d7a6c9bd92c","Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 01fbca1e93ec3f39f76c31a8f9afa32ce00da48a","Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 71a56b89203ec7e5670d94a61a9b4ae617eca804","Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 3bf519e39b51cb08a93c0599870b35a23db1031e","Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 52b19b3a22306fe452ec9e8ff96063f4bfb77b99","Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 4640fa5ad5e1a0dbd1c2d22323b7d70a8107dcfd","Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 6cbba46934aefdfb5d171e0a95aec06c24f7ca30","Linux 4.10"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:23:48.522553Z"},"published":"2026-03-18","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:33:33.483Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-23256","references":[{"url":"https://git.kernel.org/stable/c/bd680e56e316be92c01568be98d85d7a6c9bd92c"},{"url":"https://git.kernel.org/stable/c/01fbca1e93ec3f39f76c31a8f9afa32ce00da48a"},{"url":"https://git.kernel.org/stable/c/71a56b89203ec7e5670d94a61a9b4ae617eca804"},{"url":"https://git.kernel.org/stable/c/3bf519e39b51cb08a93c0599870b35a23db1031e"},{"url":"https://git.kernel.org/stable/c/52b19b3a22306fe452ec9e8ff96063f4bfb77b99"},{"url":"https://git.kernel.org/stable/c/4640fa5ad5e1a0dbd1c2d22323b7d70a8107dcfd"},{"url":"https://git.kernel.org/stable/c/6cbba46934aefdfb5d171e0a95aec06c24f7ca30"}],"tags":["cve.org"],"epss":0.00121,"epssPercentile":0.01938,"ingestedAt":"2026-11-05T22:38:32.114Z","slug":"CVE-2026-23256","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup\n\nIn setup_nic_devices(), the initialization loop jumps to the label\nsetup_nic_dev_free on failure. The current cleanup loop while(i--)\nskip the failing index i, causing a memory leak.\n\nFix this by changing the loop to iterate from the current index i\ndown to 0.\n\nCompile tested only. Issue found using code review.\n\n## Affected\n\n- `Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < bd680e56e316be92c01568be98d85d7a6c9bd92c`\n- `Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 01fbca1e93ec3f39f76c31a8f9afa32ce00da48a`\n- `Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 71a56b89203ec7e5670d94a61a9b4ae617eca804`\n- `Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 3bf519e39b51cb08a93c0599870b35a23db1031e`\n- `Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 52b19b3a22306fe452ec9e8ff96063f4bfb77b99`\n- `Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 4640fa5ad5e1a0dbd1c2d22323b7d70a8107dcfd`\n- `Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 6cbba46934aefdfb5d171e0a95aec06c24f7ca30`\n- `Linux 4.10`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}