CVE-2026-23042 PUBLISHED

In the Linux kernel, the following vulnerability has been resolved: idpf: fix aux device unplugging when rdma is not supported by vport If vport flags do not contain VIRTCHNL2_VPORT_ENABLE_RDMA, driver does not allocate vdev_info for this vport. This leads to kernel NULL pointer dereference in idpf_idc_vport_dev_down(), which references vdev_info for every vport regardless. Check, if vdev_info was ever allocated before unplugging aux device.

EPSS 0.03% · 7.1th percentile

Risk Scores

EPSS Score
0.03%
7.1th percentile

Affected Products

VendorProductVersions
LinuxLinuxbe91128c579c86d295da4325f6ac4710e4e6d2b4, be91128c579c86d295da4325f6ac4710e4e6d2b4, 6.17
linuxlinux_kernel6.17, 6.17, 6.17

Timeline

References

Open in Interactive Console →