CVE-2026-23256 — Off-by-one Error in Linux
Severity
3.3LOW
No vectorEPSS
0.0%
top 90.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 18
Description
In the Linux kernel, the following vulnerability has been resolved:
net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup
In setup_nic_devices(), the initialization loop jumps to the label
setup_nic_dev_free on failure. The current cleanup loop while(i--)
skip the failing index i, causing a memory leak.
Fix this by changing the loop to iterate from the current index i
down to 0.
Compile tested only. Issue found using code review.
Affected Packages3 packages
▶CVEListV5linux/linux846b46873eeb3baf40f7e6d8fe8f98aec95e7727 — bd680e56e316be92c01568be98d85d7a6c9bd92c+7
🔴Vulnerability Details
4OSV▶
CVE-2026-23256: In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup In setup_nic↗2026-03-18
GHSA▶
GHSA-wwv9-pvmj-9mc8: In the Linux kernel, the following vulnerability has been resolved:
net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup
In setup_n↗2026-03-18