CVE-2026-23256

Summary

In the Linux kernel, the following vulnerability has been resolved:

net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup

In setup_nic_devices(), the initialization loop jumps to the label setup_nic_dev_free on failure. The current cleanup loop while(i–) skip the failing index i, causing a memory leak.

Fix this by changing the loop to iterate from the current index i down to 0.

Compile tested only. Issue found using code review.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < bd680e56e316be92c01568be98d85d7a6c9bd92caffected
LinuxLinux846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 01fbca1e93ec3f39f76c31a8f9afa32ce00da48aaffected
LinuxLinux846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 71a56b89203ec7e5670d94a61a9b4ae617eca804affected
LinuxLinux846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 3bf519e39b51cb08a93c0599870b35a23db1031eaffected
LinuxLinux846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 52b19b3a22306fe452ec9e8ff96063f4bfb77b99affected
LinuxLinux846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 4640fa5ad5e1a0dbd1c2d22323b7d70a8107dcfdaffected
LinuxLinux846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 6cbba46934aefdfb5d171e0a95aec06c24f7ca30affected
LinuxLinux4.10affected
LinuxLinux0 < 4.10unaffected
LinuxLinux5.10.250 <= 5.10.*unaffected
LinuxLinux5.15.200 <= 5.15.*unaffected
LinuxLinux6.1.163 <= 6.1.*unaffected
LinuxLinux6.6.124 <= 6.6.*unaffected
LinuxLinux6.12.70 <= 6.12.*unaffected
LinuxLinux6.18.10 <= 6.18.*unaffected
LinuxLinux6.19 <= *unaffected

Weaknesses

References