Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Mik

Researcher fromTecharo
#45455of 53,622
5.5Total CVSS
Vulnerabilities · 1
PT-2026-26118
5.5
2026-01-01
Linux · Linux Kernel · CVE-2026-23258
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The Linux kernel contains an issue where the `netdev` pointer is not initialized before queue setup in the `setup nic devices()` function. Specifically, the pointer to the network device structure is stored in `oct->props[i].netdev` after calls to `netif set real num rx queues()` and `netif set real num tx queues()`. If these functions fail, the function returns an error without freeing the allocated `netdev`, leading to a memory leak because `oct->props[i].netdev` remains NULL. The fix involves initializing `oct->props[i].netdev` before the queue setup functions are called, ensuring proper cleanup even if errors occur. The issue was identified using static analysis and code review. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.