Search: CVE-2026-23438

A vulnerability in the Linux kernel's mvpp2 network driver allows a NULL pointer dereference leading to a kernel crash. The issue occurs because mvpp2_bm_switch_buffers() calls a function that accesses hardware registers without checking if the underlying resource pointer is NULL. This can be triggered by operations such as changing the MTU across the jumbo frame threshold. The flaw has been fixed by adding a missing guard condition consistent with the rest of the driver.