Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-23019

net: marvell: prestera: fix NULL dereference on devlink_alloc() failure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix NULL dereference on devlink_alloc() failure devlink_alloc() may return NULL on allocation failure, but prestera_devlink_alloc() unconditionally calls devlink_priv() on the returned pointer. This leads to a NULL pointer dereference if devlink allocation fails. Add a check for a NULL devlink pointer and return NULL early to avoid the crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to < 8a4333b2818f0d853b43e139936c20659366e4a0affected
  • 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to < 325aea74be7e192b5c947c782da23b0d19a5fda2affected
  • 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to < 94e070cd50790317fba7787ae6006934b7edcb6faffected
  • 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to < 3950054c9512add0cc79ab7e72b6d2f9f675e25baffected
  • 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to < 326a4b7e61d01db3507f71c8bb5e85362f607064affected
  • 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to < a428e0da1248c353557970848994f35fd3f005e2affected

Linux Linux

Default version status: affected

  • 5.10affected
  • 0 to < 5.10unaffected
  • 5.15.198 to ≤ 5.15.*unaffected
  • 6.1.161 to ≤ 6.1.*unaffected
  • 6.6.121 to ≤ 6.6.*unaffected
  • 6.12.66 to ≤ 6.12.*unaffected
  • 6.18.6 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References