---
id: CVE-2026-23256
title: 'net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup

  In setup_nic_devices(), the initialization loop jumps to the label
  setup_nic_dev_free on failure.…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 <
    bd680e56e316be92c01568be98d85d7a6c9bd92c
  - >-
    Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 <
    01fbca1e93ec3f39f76c31a8f9afa32ce00da48a
  - >-
    Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 <
    71a56b89203ec7e5670d94a61a9b4ae617eca804
  - >-
    Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 <
    3bf519e39b51cb08a93c0599870b35a23db1031e
  - >-
    Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 <
    52b19b3a22306fe452ec9e8ff96063f4bfb77b99
  - >-
    Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 <
    4640fa5ad5e1a0dbd1c2d22323b7d70a8107dcfd
  - >-
    Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 <
    6cbba46934aefdfb5d171e0a95aec06c24f7ca30
  - Linux 4.10
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:23:48.522553Z'
published: '2026-03-18'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:33:33.483Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-23256'
references:
  - url: 'https://git.kernel.org/stable/c/bd680e56e316be92c01568be98d85d7a6c9bd92c'
  - url: 'https://git.kernel.org/stable/c/01fbca1e93ec3f39f76c31a8f9afa32ce00da48a'
  - url: 'https://git.kernel.org/stable/c/71a56b89203ec7e5670d94a61a9b4ae617eca804'
  - url: 'https://git.kernel.org/stable/c/3bf519e39b51cb08a93c0599870b35a23db1031e'
  - url: 'https://git.kernel.org/stable/c/52b19b3a22306fe452ec9e8ff96063f4bfb77b99'
  - url: 'https://git.kernel.org/stable/c/4640fa5ad5e1a0dbd1c2d22323b7d70a8107dcfd'
  - url: 'https://git.kernel.org/stable/c/6cbba46934aefdfb5d171e0a95aec06c24f7ca30'
tags:
  - cve.org
epss: 0.00121
epssPercentile: 0.01938
ingestedAt: '2026-11-05T22:38:32.114Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup

In setup_nic_devices(), the initialization loop jumps to the label
setup_nic_dev_free on failure. The current cleanup loop while(i--)
skip the failing index i, causing a memory leak.

Fix this by changing the loop to iterate from the current index i
down to 0.

Compile tested only. Issue found using code review.

## Affected

- `Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < bd680e56e316be92c01568be98d85d7a6c9bd92c`
- `Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 01fbca1e93ec3f39f76c31a8f9afa32ce00da48a`
- `Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 71a56b89203ec7e5670d94a61a9b4ae617eca804`
- `Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 3bf519e39b51cb08a93c0599870b35a23db1031e`
- `Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 52b19b3a22306fe452ec9e8ff96063f4bfb77b99`
- `Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 4640fa5ad5e1a0dbd1c2d22323b7d70a8107dcfd`
- `Linux >= 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 6cbba46934aefdfb5d171e0a95aec06c24f7ca30`
- `Linux 4.10`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.