---
id: CVE-2026-23257
title: 'net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup

  In setup_nic_devices(), the initialization loop jumps to the label
  setup_nic_dev_free on failure.…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 <
    af38d9a5cb49fe9d0d282b44f17fdc1f3270d99d
  - >-
    Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 <
    d86c58eb005eb99da402452f3db7a6e0eae32815
  - >-
    Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 <
    f1216b80c9040a904d2ad7c8cd24ca0ff1f36932
  - >-
    Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 <
    a0d2389c8cdc1f05de5eb8663bffe9ed05dca769
  - >-
    Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 <
    f86bd16280a0f88b538394e0565c56ce4756da99
  - >-
    Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 <
    293eaad0d6d6b2a37a458c7deb7be345349cd963
  - >-
    Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 <
    8558aef4e8a1a83049ab906d21d391093cfa7e7f
  - Linux 4.2
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:23:53.487632Z'
published: '2026-03-18'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:33:33.655Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-23257'
references:
  - url: 'https://git.kernel.org/stable/c/af38d9a5cb49fe9d0d282b44f17fdc1f3270d99d'
  - url: 'https://git.kernel.org/stable/c/d86c58eb005eb99da402452f3db7a6e0eae32815'
  - url: 'https://git.kernel.org/stable/c/f1216b80c9040a904d2ad7c8cd24ca0ff1f36932'
  - url: 'https://git.kernel.org/stable/c/a0d2389c8cdc1f05de5eb8663bffe9ed05dca769'
  - url: 'https://git.kernel.org/stable/c/f86bd16280a0f88b538394e0565c56ce4756da99'
  - url: 'https://git.kernel.org/stable/c/293eaad0d6d6b2a37a458c7deb7be345349cd963'
  - url: 'https://git.kernel.org/stable/c/8558aef4e8a1a83049ab906d21d391093cfa7e7f'
tags:
  - cve.org
epss: 0.00121
epssPercentile: 0.01939
ingestedAt: '2026-11-05T22:38:32.104Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup

In setup_nic_devices(), the initialization loop jumps to the label
setup_nic_dev_free on failure. The current cleanup loop while(i--)
skip the failing index i, causing a memory leak.

Fix this by changing the loop to iterate from the current index i
down to 0.

Also, decrement i in the devlink_alloc failure path to point to the
last successfully allocated index.

Compile tested only. Issue found using code review.

## Affected

- `Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < af38d9a5cb49fe9d0d282b44f17fdc1f3270d99d`
- `Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < d86c58eb005eb99da402452f3db7a6e0eae32815`
- `Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < f1216b80c9040a904d2ad7c8cd24ca0ff1f36932`
- `Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < a0d2389c8cdc1f05de5eb8663bffe9ed05dca769`
- `Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < f86bd16280a0f88b538394e0565c56ce4756da99`
- `Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < 293eaad0d6d6b2a37a458c7deb7be345349cd963`
- `Linux >= f21fb3ed364bb83533c5efe19354e337ea9ecda9 < 8558aef4e8a1a83049ab906d21d391093cfa7e7f`
- `Linux 4.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.