CVE Explorer

CVE-2026-23258

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Initialize netdev pointer before queue setup In setup_nic_devices(), the netdev is allocated using alloc_etherdev_mq(). However, the pointer to this structure is stored in oct->props[i].netdev only after the calls to netif_set_real_num_rx_queues() and netif_set_real_num_tx_queues(). If either of these functions fails, setup_nic_devices() returns an error without freeing the allocated netdev. Since oct->props[i]

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:7c85122e12b58c09aa0467f9c80a86ebbd0fab8fbc55c63742fdd9d38cc558a1

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/ethernet/cavium/liquidio/lio_main.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.18"},{"lessThan":"4.18","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.250","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.200","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.163","versio…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:44051f3435730ed487911f153202b5e017311d58cc5fafdf6fc4d0ed6393ea4f · sha256:926729856657a790… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/ethernet/cavium/liquidio/lio_main.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"be109646cdaecab262f6276303b1763468c94378","status":"affected","version":"c33c997346c34ea7b89aec99524ad9632a2f1e0c","versionType":"git"},{"lessThan":"c81a8515fb8c8fb5d0dbc21f48337494bf1d60df","status":"affected","version":"c33c997346c34ea7b89aec99524ad9632a2f1e0c","versionType":"git"},{"lessThan":"a0e57c0b68c9e6f9a8fd7c1167861a5a730eb2f4","status":"affected","version"…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:44051f3435730ed487911f153202b5e017311d58cc5fafdf6fc4d0ed6393ea4f · sha256:926729856657a790… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:44051f3435730ed487911f153202b5e017311d58cc5fafdf6fc4d0ed6393ea4f · sha256:926729856657a790… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:44051f3435730ed487911f153202b5e017311d58cc5fafdf6fc4d0ed6393ea4f · sha256:926729856657a790… · /containers/cna/affected/0

Source references

7 source assertions

{"url":"https://git.kernel.org/stable/c/1d4590fde856cb94bd9a46e795c29d8288c238fc"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:44051f3435730ed487911f153202b5e017311d58cc5fafdf6fc4d0ed6393ea4f · sha256:926729856657a790… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/926ede0c85e1e57c97d64d9612455267d597bb2c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:44051f3435730ed487911f153202b5e017311d58cc5fafdf6fc4d0ed6393ea4f · sha256:926729856657a790… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/a0e57c0b68c9e6f9a8fd7c1167861a5a730eb2f4"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:44051f3435730ed487911f153202b5e017311d58cc5fafdf6fc4d0ed6393ea4f · sha256:926729856657a790… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/be109646cdaecab262f6276303b1763468c94378"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:44051f3435730ed487911f153202b5e017311d58cc5fafdf6fc4d0ed6393ea4f · sha256:926729856657a790… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/c0ed6c77ec34050971fd0df2a94dfdea66d09331"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:44051f3435730ed487911f153202b5e017311d58cc5fafdf6fc4d0ed6393ea4f · sha256:926729856657a790… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/c81a8515fb8c8fb5d0dbc21f48337494bf1d60df"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:44051f3435730ed487911f153202b5e017311d58cc5fafdf6fc4d0ed6393ea4f · sha256:926729856657a790… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/d028147ae06407cb355245db1774793600670169"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:44051f3435730ed487911f153202b5e017311d58cc5fafdf6fc4d0ed6393ea4f · sha256:926729856657a790… · /containers/cna/references/5

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer