CVE-2026-23019

net: marvell: prestera: fix NULL dereference on devlink_alloc() failure

State: Published
Severity: Not scored
Published: Jan 31, 2026
Updated: Oct 15, 2026
Reserved: Jan 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: marvell: prestera: fix NULL dereference on devlink_alloc() failure

devlink_alloc() may return NULL on allocation failure, but prestera_devlink_alloc() unconditionally calls devlink_priv() on the returned pointer.

This leads to a NULL pointer dereference if devlink allocation fails. Add a check for a NULL devlink pointer and return NULL early to avoid the crash.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 8a4333b2818f0d853b43e139936c20659366e4a0Affected 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 325aea74be7e192b5c947c782da23b0d19a5fda2Affected 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 94e070cd50790317fba7787ae6006934b7edcb6fAffected 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 3950054c9512add0cc79ab7e72b6d2f9f675e25bAffected 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 326a4b7e61d01db3507f71c8bb5e85362f607064Affected 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before a428e0da1248c353557970848994f35fd3f005e2Affected
LinuxLinux	5.10Affected before 5.10Not affected 5.15.198 through 5.15.Not affected 6.1.161 through 6.1.Not affected 6.6.121 through 6.6.Not affected 6.12.66 through 6.12.Not affected 6.18.6 through 6.18.*Not affected 6.19 and laterNot affected

Product

Versions

LinuxLinux

34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 8a4333b2818f0d853b43e139936c20659366e4a0Affected
34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 325aea74be7e192b5c947c782da23b0d19a5fda2Affected
34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 94e070cd50790317fba7787ae6006934b7edcb6fAffected
34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 3950054c9512add0cc79ab7e72b6d2f9f675e25bAffected
34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 326a4b7e61d01db3507f71c8bb5e85362f607064Affected
34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before a428e0da1248c353557970848994f35fd3f005e2Affected

LinuxLinux

5.10Affected
before 5.10Not affected
5.15.198 through 5.15.*Not affected
6.1.161 through 6.1.*Not affected
6.6.121 through 6.6.*Not affected
6.12.66 through 6.12.*Not affected
6.18.6 through 6.18.*Not affected
6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.