{"id":"CVE-2026-23257","title":"net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup\n\nIn setup_nic_devices(), the initialization loop jumps to the label\nsetup_nic_dev_free on failure.…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < af38d9a5cb49fe9d0d282b44f17fdc1f3270d99d","Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < d86c58eb005eb99da402452f3db7a6e0eae32815","Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < f1216b80c9040a904d2ad7c8cd24ca0ff1f36932","Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < a0d2389c8cdc1f05de5eb8663bffe9ed05dca769","Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < f86bd16280a0f88b538394e0565c56ce4756da99","Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < 293eaad0d6d6b2a37a458c7deb7be345349cd963","Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < 8558aef4e8a1a83049ab906d21d391093cfa7e7f","Linux 4.2"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:23:53.487632Z"},"published":"2026-03-18","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:33:33.655Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-23257","references":[{"url":"https://git.kernel.org/stable/c/af38d9a5cb49fe9d0d282b44f17fdc1f3270d99d"},{"url":"https://git.kernel.org/stable/c/d86c58eb005eb99da402452f3db7a6e0eae32815"},{"url":"https://git.kernel.org/stable/c/f1216b80c9040a904d2ad7c8cd24ca0ff1f36932"},{"url":"https://git.kernel.org/stable/c/a0d2389c8cdc1f05de5eb8663bffe9ed05dca769"},{"url":"https://git.kernel.org/stable/c/f86bd16280a0f88b538394e0565c56ce4756da99"},{"url":"https://git.kernel.org/stable/c/293eaad0d6d6b2a37a458c7deb7be345349cd963"},{"url":"https://git.kernel.org/stable/c/8558aef4e8a1a83049ab906d21d391093cfa7e7f"}],"tags":["cve.org"],"epss":0.00121,"epssPercentile":0.01939,"ingestedAt":"2026-11-05T22:38:32.104Z","slug":"CVE-2026-23257","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup\n\nIn setup_nic_devices(), the initialization loop jumps to the label\nsetup_nic_dev_free on failure. The current cleanup loop while(i--)\nskip the failing index i, causing a memory leak.\n\nFix this by changing the loop to iterate from the current index i\ndown to 0.\n\nAlso, decrement i in the devlink_alloc failure path to point to the\nlast successfully allocated index.\n\nCompile tested only. Issue found using code review.\n\n## Affected\n\n- `Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < af38d9a5cb49fe9d0d282b44f17fdc1f3270d99d`\n- `Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < d86c58eb005eb99da402452f3db7a6e0eae32815`\n- `Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < f1216b80c9040a904d2ad7c8cd24ca0ff1f36932`\n- `Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < a0d2389c8cdc1f05de5eb8663bffe9ed05dca769`\n- `Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < f86bd16280a0f88b538394e0565c56ce4756da99`\n- `Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < 293eaad0d6d6b2a37a458c7deb7be345349cd963`\n- `Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < 8558aef4e8a1a83049ab906d21d391093cfa7e7f`\n- `Linux 4.2`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}