CVE-2026-23256

net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup

published March 18, 2026

CVSS
—
EPSS
0%
Percentile
1.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup

In setup_nic_devices(), the initialization loop jumps to the label

setup_nic_dev_free on failure. The current cleanup loop while(i--)

skip the failing index i, causing a memory leak.

Fix this by changing the loop to iterate from the current index i

down to 0.

Compile tested only. Issue found using code review.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00119 · 1.7th percentile
Published
2026-03-18T17:41Z
EPSS history
Timeline
  • 18 MAR 17:41Z
    net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup
    cvelistv5