CVE-2026-22996 — NULL Pointer Dereference in Linux

CWE-476 — NULL Pointer Dereference CWE-824 — Access of Uninitialized Pointer6 documents6 sources

Severity

5.5MEDIUMNVD

EPSS

0.0%

top 95.75%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Linux Linux Kernel Debian Linux

Timeline

PublishedJan 25

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv mlx5e_priv is an unstable structure that can be memset(0) if profile attaching fails, mlx5e_priv in mlx5e_dev devlink private is used to reference the netdev and mdev associated with that struct. Instead, store netdev directly into mlx5e_dev and get mdev from the containing mlx5_adev aux device structure. This fixes a kernel oops in mlx5e_remove when switchdev mode f…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDlinux/linux_kernel5.12 — 6.12.67+2

▶Debianlinux/linux_kernel< 6.12.69-1+1

▶CVEListV5linux/linuxc4d7eb57687f358cd498ea3624519236af8db97e — dcb2ad755a16cb0ecd2dc98234d71a6e216ae7fe+3

▶debiandebian/linux< linux 6.18.8-1 (forky)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

OSV

CVE-2026-22996: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv mlx5e_priv is an unsta↗2026-01-25

▶

GHSA

GHSA-r233-7m73-5h45: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv mlx5e_priv is an uns↗2026-01-25

▶

📋Vendor Advisories

Red Hat

kernel: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv↗2026-01-25

▶

Debian

CVE-2026-22996: linux - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: ...↗2026

▶

🕵️Threat Intelligence

Wiz

CVE-2026-22996 Impact, Exploitability, and Mitigation Steps | Wiz↗

▶