NetSight
IP …
medium5.5

CVE-2026-23019

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix NULL dereference on devlink_alloc() failure devlink_alloc() may…

Impact

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix NULL dereference on devlink_alloc() failure devlink_alloc() may return NULL on allocation failure, but prestera_devlink_alloc() unconditionally calls devlink_priv() on the returned pointer. This leads to a NULL pointer dereference if devlink allocation fails. Add a check for a NULL devlink pointer and return NULL early to avoid the crash.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.10.1 before 5.15.198
from 5.16 before 6.1.161
from 6.2 before 6.6.121
from 6.7 before 6.12.66
from 6.13 before 6.18.6
Version 5.10

Weakness classification

CWE-476

References