CVE-2026-43282

MEDIUM EPSS 1.7%
Published May 6, 20261mo ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published May 6, 2026 1mo ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix potential NULL pointer dereference in ionic_query_port The function ionic_query_port() calls ib_device_get_netdev() without checking the return value which could lead to NULL pointer dereference, Fix it by checking the return value and return -ENODEV if the 'ndev' is NULL.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
1.7% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 3

VendorProductVersionRange
linuxlinux_kernel*≥6.18  –  <6.18.16
linuxlinux_kernel*≥6.19  –  <6.19.6
linuxlinux_kernel7.0any

References 3

  • git.kernel.org https://git.kernel.org/stable/c/2b96156c927cd83c109e2e3946e6111dce73231f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/81932a46dfd0db10a03f46f0b1c7ef946ac4552f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fd80bd7105f88189f47d465ca8cb7d115570de30
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/2b96156c927cd83c109e2e3946e6111dce73231f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/81932a46dfd0db10a03f46f0b1c7ef946ac4552f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fd80bd7105f88189f47d465ca8cb7d115570de30
    Patch