CVE-2026-23084

Summary

In the Linux kernel, the following vulnerability has been resolved:

be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list

When the parameter pmac_id_valid argument of be_cmd_get_mac_from_list() is set to false, the driver may request the PMAC_ID from the firmware of the network card, and this function will store that PMAC_ID at the provided address pmac_id. This is the contract of this function.

However, there is a location within the driver where both pmac_id_valid == false and pmac_id == NULL are being passed. This could result in dereferencing a NULL pointer.

To resolve this issue, it is necessary to pass the address of a stub variable to the function.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux95046b927a54f461766f83a212c6a93bc5fd2e67 < 4cba480c9b9a3861a515262225cb53a1f5978344affected
LinuxLinux95046b927a54f461766f83a212c6a93bc5fd2e67 < 92c6dc181a18e6e0ddb872ed35cb48a9274829e4affected
LinuxLinux95046b927a54f461766f83a212c6a93bc5fd2e67 < 6c3e00888dbec887125a08b51a705b9b163fcdd1affected
LinuxLinux95046b927a54f461766f83a212c6a93bc5fd2e67 < e206fb415db36bad52bb90c08d46ce71ffbe8a80affected
LinuxLinux95046b927a54f461766f83a212c6a93bc5fd2e67 < 47ffb4dcffe336f4a7bd0f3284be7aadc6484698affected
LinuxLinux95046b927a54f461766f83a212c6a93bc5fd2e67 < 31410a01a86bcb98c798d01061abf1f789c4f75aaffected
LinuxLinux95046b927a54f461766f83a212c6a93bc5fd2e67 < 8215794403d264739cc676668087512950b2ff31affected
LinuxLinux3.12affected
LinuxLinux0 < 3.12unaffected
LinuxLinux5.10.249 <= 5.10.*unaffected
LinuxLinux5.15.199 <= 5.15.*unaffected
LinuxLinux6.1.162 <= 6.1.*unaffected
LinuxLinux6.6.122 <= 6.6.*unaffected
LinuxLinux6.12.68 <= 6.12.*unaffected
LinuxLinux6.18.8 <= 6.18.*unaffected
LinuxLinux6.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References