CVE-2026-23257

net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup

published March 18, 2026

CVSS
—
EPSS
0%
Percentile
1.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup

In setup_nic_devices(), the initialization loop jumps to the label

setup_nic_dev_free on failure. The current cleanup loop while(i--)

skip the failing index i, causing a memory leak.

Fix this by changing the loop to iterate from the current index i

down to 0.

Also, decrement i in the devlink_alloc failure path to point to the

last successfully allocated index.

Compile tested only. Issue found using code review.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00119 · 1.7th percentile
Published
2026-03-18T17:41Z
EPSS history
Timeline
  • 18 MAR 17:41Z
    net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup
    cvelistv5