Riskcovery

CVE-2026-23084

be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list

State
Published
Severity
Not scored
Published
Feb 4, 2026
Updated
Oct 19, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list

When the parameter pmac_id_valid argument of be_cmd_get_mac_from_list() is set to false, the driver may request the PMAC_ID from the firmware of the network card, and this function will store that PMAC_ID at the provided address pmac_id. This is the contract of this function.

However, there is a location within the driver where both pmac_id_valid == false and pmac_id == NULL are being passed. This could result in dereferencing a NULL pointer.

To resolve this issue, it is necessary to pass the address of a stub variable to the function.

Scores

The record has no CVSS score.

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 95046b927a54f461766f83a212c6a93bc5fd2e67 to before 4cba480c9b9a3861a515262225cb53a1f5978344Affected
  • 95046b927a54f461766f83a212c6a93bc5fd2e67 to before 92c6dc181a18e6e0ddb872ed35cb48a9274829e4Affected
  • 95046b927a54f461766f83a212c6a93bc5fd2e67 to before 6c3e00888dbec887125a08b51a705b9b163fcdd1Affected
  • 95046b927a54f461766f83a212c6a93bc5fd2e67 to before e206fb415db36bad52bb90c08d46ce71ffbe8a80Affected
  • 95046b927a54f461766f83a212c6a93bc5fd2e67 to before 47ffb4dcffe336f4a7bd0f3284be7aadc6484698Affected
  • 95046b927a54f461766f83a212c6a93bc5fd2e67 to before 31410a01a86bcb98c798d01061abf1f789c4f75aAffected
  • 95046b927a54f461766f83a212c6a93bc5fd2e67 to before 8215794403d264739cc676668087512950b2ff31Affected
LinuxLinux
  • 3.12Affected
  • before 3.12Not affected
  • 5.10.249 through 5.10.*Not affected
  • 5.15.199 through 5.15.*Not affected
  • 6.1.162 through 6.1.*Not affected
  • 6.6.122 through 6.6.*Not affected
  • 6.12.68 through 6.12.*Not affected
  • 6.18.8 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.