CVE-2026-23256

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-03-18 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup In setup_nic_devices(), the initialization loop jumps to the label setup_nic_dev_free on failure. The current cleanup loop while(i--) skip the failing index i, causing a memory leak. Fix this by changing the loop to iterate from the current index i down to 0. Compile tested only. Issue found using code review.

Weakness Classification (1)

Affected Software (17)

VendorProductVersion
Linux Linux 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < bd680e56e316be92c01568be98d85d7a6c9bd92c
Linux Linux 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 01fbca1e93ec3f39f76c31a8f9afa32ce00da48a
Linux Linux 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 71a56b89203ec7e5670d94a61a9b4ae617eca804
Linux Linux 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 3bf519e39b51cb08a93c0599870b35a23db1031e
Linux Linux 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 52b19b3a22306fe452ec9e8ff96063f4bfb77b99
Linux Linux 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 4640fa5ad5e1a0dbd1c2d22323b7d70a8107dcfd
Linux Linux 846b46873eeb3baf40f7e6d8fe8f98aec95e7727 < 6cbba46934aefdfb5d171e0a95aec06c24f7ca30
Linux Linux 4.10
linux linux_kernel 4.10 – 5.10.250
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.13%
Raw Score 0.001340
Percentile 3.0%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00134
2026-11-13
0.00134
2026-11-12
0.00121
2026-11-10
0.00121
2026-11-09
0.00121
2026-11-08
0.00121
2026-11-07
0.00121
2026-11-06
0.00121
2026-11-05
0.00121

Intelligence Sources

mitre ref →
nvd ref →