NetSight
IP …
medium5.5

CVE-2026-23257

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup In setup_nic_devices(…

Impact

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup In setup_nic_devices(), the initialization loop jumps to the label setup_nic_dev_free on failure. The current cleanup loop while(i--) skip the failing index i, causing a memory leak. Fix this by changing the loop to iterate from the current index i down to 0. Also, decrement i in the devlink_alloc failure path to point to the last successfully allocated index. Compile tested only. Issue found using code review.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.2 before 5.10.250
from 5.11 before 5.15.200
from 5.16 before 6.1.163
from 6.2 before 6.6.124
from 6.7 before 6.12.70
from 6.13 before 6.18.10

Weakness classification

CWE-193

References