CVE-2026-23042

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: idpf: fix aux device unplugging when rdma is not supported by vport If vport flags do not contain VIRTCHNL2_VPORT_ENABLE_RDMA, driver does not allocate vdev_info for this vport. This leads to kernel NULL pointer dereference in idpf_idc_vport_dev_down(), which references vdev_info for every vport regardless. Check, if vdev_info was ever allocated before unplugging aux device.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedFeb 4, 2026
First seenFeb 4, 2026

How to fix

Update
  • Linux Linux0ad6d6e50e9d8bf596cfe77a882ddc20b29f525a, 4648fb2f2e7210c53b85220ee07d42d1e4bae3f9 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxbe91128c579c86d295da4325f6ac4710e4e6d2b4 ≤ v < 0ad6d6e50e9d8bf596cfe77a882ddc20b29f525a, be91128c579c86d295da4325f6ac4710e4e6d2b4 ≤ v < 4648fb2f2e7210c53b85220ee07d42d1e4bae3f9, 6.170ad6d6e50e9d8bf596cfe77a882ddc20b29f525a, 4648fb2f2e7210c53b85220ee07d42d1e4bae3f9

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-23042 · Linux · Dark Radar