CVE-2026-23019

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-23019
In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix NULL dereference on devlink_alloc() failure devlink_alloc() may return NULL on allocation failure, but prestera_devlink_alloc() unconditionally calls devlink_priv() on the returned pointer. This leads to a NULL pointer dereference if devlink allocation fails. Add a check for a NULL devlink pointer and return NULL early to avoid the crash.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/325aea74be7e192b5c947c782da23b0d19a5fda2 Patch
https://git.kernel.org/stable/c/326a4b7e61d01db3507f71c8bb5e85362f607064 Patch
https://git.kernel.org/stable/c/3950054c9512add0cc79ab7e72b6d2f9f675e25b Patch
https://git.kernel.org/stable/c/8a4333b2818f0d853b43e139936c20659366e4a0 Patch
https://git.kernel.org/stable/c/94e070cd50790317fba7787ae6006934b7edcb6f Patch
https://git.kernel.org/stable/c/a428e0da1248c353557970848994f35fd3f005e2 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.10:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*
History

25 Mar 2026, 15:55

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: net: marvell: prestera: corregir desreferencia NULL en caso de fallo de devlink_alloc() devlink_alloc() puede devolver NULL en caso de fallo de asignación, pero prestera_devlink_alloc() llama incondicionalmente a devlink_priv() sobre el puntero devuelto. Esto conduce a una desreferencia de puntero NULL si la asignación de devlink falla. Añadir una comprobación para un puntero devlink NULL y devolver NULL anticipadamente para evitar el fallo.
CPE cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.10:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CWE CWE-476
References () https://git.kernel.org/stable/c/325aea74be7e192b5c947c782da23b0d19a5fda2 - () https://git.kernel.org/stable/c/325aea74be7e192b5c947c782da23b0d19a5fda2 - Patch
References () https://git.kernel.org/stable/c/326a4b7e61d01db3507f71c8bb5e85362f607064 - () https://git.kernel.org/stable/c/326a4b7e61d01db3507f71c8bb5e85362f607064 - Patch
References () https://git.kernel.org/stable/c/3950054c9512add0cc79ab7e72b6d2f9f675e25b - () https://git.kernel.org/stable/c/3950054c9512add0cc79ab7e72b6d2f9f675e25b - Patch
References () https://git.kernel.org/stable/c/8a4333b2818f0d853b43e139936c20659366e4a0 - () https://git.kernel.org/stable/c/8a4333b2818f0d853b43e139936c20659366e4a0 - Patch
References () https://git.kernel.org/stable/c/94e070cd50790317fba7787ae6006934b7edcb6f - () https://git.kernel.org/stable/c/94e070cd50790317fba7787ae6006934b7edcb6f - Patch
References () https://git.kernel.org/stable/c/a428e0da1248c353557970848994f35fd3f005e2 - () https://git.kernel.org/stable/c/a428e0da1248c353557970848994f35fd3f005e2 - Patch

31 Jan 2026, 12:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-31 12:16

Updated : 2026-03-25 15:55

NVD link : CVE-2026-23019

Mitre link : CVE-2026-23019

CVE.ORG link : CVE-2026-23019

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference