CVE-2026-23042

idpf: fix aux device unplugging when rdma is not supported by vport

State
Published
Severity
Not scored
Published
Feb 4, 2026
Updated
May 11, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

idpf: fix aux device unplugging when rdma is not supported by vport

If vport flags do not contain VIRTCHNL2_VPORT_ENABLE_RDMA, driver does not allocate vdev_info for this vport. This leads to kernel NULL pointer dereference in idpf_idc_vport_dev_down(), which references vdev_info for every vport regardless.

Check, if vdev_info was ever allocated before unplugging aux device.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • be91128c579c86d295da4325f6ac4710e4e6d2b4 to before 0ad6d6e50e9d8bf596cfe77a882ddc20b29f525aAffected
  • be91128c579c86d295da4325f6ac4710e4e6d2b4 to before 4648fb2f2e7210c53b85220ee07d42d1e4bae3f9Affected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.6 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.