VulnerabilityPublished 18 Mar 2026Updated 5 Nov 2026

CVE-2026-23257: Linux kernel · net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup

Affects Linux kernelSource CVE Database V5

Compare

Not known to be exploited · fixed in f1216b80c9040a904d2ad7c8cd24ca0ff1f36932 : update Linux kernel when convenient.

Data as of 5 Nov 2026, 21:49 UTC

Severity

Unrated

Rated by Threat Radar · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none

Exploitation: No evidence of active exploitation and no public proof of concept
Automatable: Attackers cannot reliably automate steps 1–4 of the kill chain
Technical impact: Limited control over the software or limited information exposure

CISA SSVC assessment, 2026-11-05.

Patch

Available – fixed in f1216b80c9040a904d2ad7c8cd24ca0ff1f36932, f86bd16280a0f88b538394e0565c56ce4756da99, d86c58eb005eb99da402452f3db7a6e0eae32815 +4

Exploitation evidence

Disclosed: evidence found.
CVE published 18 Mar 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 5 Nov 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponized: A Metasploit exploit module or Exploit-DB entry exists (Metasploit scanner modules do not count), or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

Product	Affected	Fixed in
LinuxLinux	Affected ≥ f21fb3ed364bb83533c5efe19354e337ea9ecda9, < f1216b80c9040a904d2ad7c8cd24ca0ff1f36932	Fixed in f1216b80c9040a904d2ad7c8cd24ca0ff1f36932
LinuxLinux	Affected ≥ f21fb3ed364bb83533c5efe19354e337ea9ecda9, < f86bd16280a0f88b538394e0565c56ce4756da99	Fixed in f86bd16280a0f88b538394e0565c56ce4756da99
LinuxLinux	Affected ≥ f21fb3ed364bb83533c5efe19354e337ea9ecda9, < d86c58eb005eb99da402452f3db7a6e0eae32815	Fixed in d86c58eb005eb99da402452f3db7a6e0eae32815
LinuxLinux	Affected ≥ f21fb3ed364bb83533c5efe19354e337ea9ecda9, < af38d9a5cb49fe9d0d282b44f17fdc1f3270d99d	Fixed in af38d9a5cb49fe9d0d282b44f17fdc1f3270d99d
LinuxLinux	Affected ≥ f21fb3ed364bb83533c5efe19354e337ea9ecda9, < a0d2389c8cdc1f05de5eb8663bffe9ed05dca769	Fixed in a0d2389c8cdc1f05de5eb8663bffe9ed05dca769
LinuxLinux	Affected ≥ f21fb3ed364bb83533c5efe19354e337ea9ecda9, < 8558aef4e8a1a83049ab906d21d391093cfa7e7f	Fixed in 8558aef4e8a1a83049ab906d21d391093cfa7e7f

Description

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup In setup_nic_devices(), the initialization loop jumps to the label setup_nic_dev_free on failure. The current cleanup loop while(i--) skip the failing index i, causing a memory leak. Fix this by changing the loop to iterate from the current index i down to 0. Also, decrement i in the devlink_alloc failure path to point to the last successfully allocated index. Compile tested only. Issue found using code review.

References

Community reviews

Loading reviews…