CVE-2026-23256

net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup

State: Published
Severity: Not scored
Published: Mar 18, 2026
Updated: May 11, 2026
Reserved: Jan 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup

In setup_nic_devices(), the initialization loop jumps to the label setup_nic_dev_free on failure. The current cleanup loop while(i--) skip the failing index i, causing a memory leak.

Fix this by changing the loop to iterate from the current index i down to 0.

Compile tested only. Issue found using code review.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	846b46873eeb3baf40f7e6d8fe8f98aec95e7727 to before bd680e56e316be92c01568be98d85d7a6c9bd92cAffected 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 to before 01fbca1e93ec3f39f76c31a8f9afa32ce00da48aAffected 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 to before 71a56b89203ec7e5670d94a61a9b4ae617eca804Affected 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 to before 3bf519e39b51cb08a93c0599870b35a23db1031eAffected 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 to before 52b19b3a22306fe452ec9e8ff96063f4bfb77b99Affected 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 to before 4640fa5ad5e1a0dbd1c2d22323b7d70a8107dcfdAffected 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 to before 6cbba46934aefdfb5d171e0a95aec06c24f7ca30Affected
LinuxLinux	4.10Affected before 4.10Not affected 5.10.250 through 5.10.Not affected 5.15.200 through 5.15.Not affected 6.1.163 through 6.1.Not affected 6.6.124 through 6.6.Not affected 6.12.70 through 6.12.Not affected 6.18.10 through 6.18.Not affected 6.19 and laterNot affected

Product

Versions

LinuxLinux

846b46873eeb3baf40f7e6d8fe8f98aec95e7727 to before bd680e56e316be92c01568be98d85d7a6c9bd92cAffected
846b46873eeb3baf40f7e6d8fe8f98aec95e7727 to before 01fbca1e93ec3f39f76c31a8f9afa32ce00da48aAffected
846b46873eeb3baf40f7e6d8fe8f98aec95e7727 to before 71a56b89203ec7e5670d94a61a9b4ae617eca804Affected
846b46873eeb3baf40f7e6d8fe8f98aec95e7727 to before 3bf519e39b51cb08a93c0599870b35a23db1031eAffected
846b46873eeb3baf40f7e6d8fe8f98aec95e7727 to before 52b19b3a22306fe452ec9e8ff96063f4bfb77b99Affected
846b46873eeb3baf40f7e6d8fe8f98aec95e7727 to before 4640fa5ad5e1a0dbd1c2d22323b7d70a8107dcfdAffected
846b46873eeb3baf40f7e6d8fe8f98aec95e7727 to before 6cbba46934aefdfb5d171e0a95aec06c24f7ca30Affected

LinuxLinux

4.10Affected
before 4.10Not affected
5.10.250 through 5.10.*Not affected
5.15.200 through 5.15.*Not affected
6.1.163 through 6.1.*Not affected
6.6.124 through 6.6.*Not affected
6.12.70 through 6.12.*Not affected
6.18.10 through 6.18.*Not affected
6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.