CVE-2026-23257 — Off-by-one Error in Linux
Severity
3.3LOW
No vectorEPSS
0.0%
top 90.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 18
Description
In the Linux kernel, the following vulnerability has been resolved:
net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup
In setup_nic_devices(), the initialization loop jumps to the label
setup_nic_dev_free on failure. The current cleanup loop while(i--)
skip the failing index i, causing a memory leak.
Fix this by changing the loop to iterate from the current index i
down to 0.
Also, decrement i in the devlink_alloc failure path to point to the
last successfully allocated in…
Affected Packages3 packages
▶CVEListV5linux/linuxf21fb3ed364bb83533c5efe19354e337ea9ecda9 — af38d9a5cb49fe9d0d282b44f17fdc1f3270d99d+7
🔴Vulnerability Details
4OSV▶
CVE-2026-23257: In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup In setup_nic↗2026-03-18
GHSA▶
GHSA-p66j-qj5c-q58g: In the Linux kernel, the following vulnerability has been resolved:
net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup
In setup_n↗2026-03-18