PT-2026-5523 · Linux+3 · Linux Kernel+3

Published

2026-01-01

·

Updated

2026-05-22

·

CVE-2026-23020

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel related to network devices. Specifically, a potential null dereference issue was identified within the vortex probe1() function when handling 3com 3c59x network devices. The issue arises because the pdev variable can be null, leading to a potential crash when the free ring function is called with a null pdev pointer.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-04469
CVE-2026-23020
ECHO-CCF2-3C59-98E6
USN-8096-1
USN-8096-2
USN-8096-3
USN-8096-4
USN-8096-5
USN-8116-1
USN-8141-1
USN-8163-1
USN-8163-2
USN-8243-1
USN-8278-1
USN-8289-1
USN-8296-1

Affected Products

3Com 3C59X
Linuxmint
Linux Kernel
Ubuntu