CVE-2026-23019

MEDIUM EPSS 1.8%
Published Jan 31, 20264mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Jan 31, 2026 4mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix NULL dereference on devlink_alloc() failure devlink_alloc() may return NULL on allocation failure, but prestera_devlink_alloc() unconditionally calls devlink_priv() on the returned pointer. This leads to a NULL pointer dereference if devlink allocation fails. Add a check for a NULL devlink pointer and return NULL early to avoid the crash.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
1.8% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 14

VendorProductVersionRange
linuxlinux_kernel*≥5.10.1  –  <5.15.198
linuxlinux_kernel*≥5.16  –  <6.1.161
linuxlinux_kernel*≥6.2  –  <6.6.121
linuxlinux_kernel*≥6.7  –  <6.12.66
linuxlinux_kernel*≥6.13  –  <6.18.6
linuxlinux_kernel5.10any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any

References 6

  • git.kernel.org https://git.kernel.org/stable/c/325aea74be7e192b5c947c782da23b0d19a5fda2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/326a4b7e61d01db3507f71c8bb5e85362f607064
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3950054c9512add0cc79ab7e72b6d2f9f675e25b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8a4333b2818f0d853b43e139936c20659366e4a0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/94e070cd50790317fba7787ae6006934b7edcb6f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a428e0da1248c353557970848994f35fd3f005e2
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/325aea74be7e192b5c947c782da23b0d19a5fda2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/326a4b7e61d01db3507f71c8bb5e85362f607064
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3950054c9512add0cc79ab7e72b6d2f9f675e25b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8a4333b2818f0d853b43e139936c20659366e4a0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/94e070cd50790317fba7787ae6006934b7edcb6f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a428e0da1248c353557970848994f35fd3f005e2
    Patch