CVE-2026-68328
Description
In the Linux kernel, the following vulnerability has been resolved: nfp: Check resource mutex allocation nfp_cpp_resource_find() allocates a CPP mutex handle for the matching resource-table entry and then reports success. nfp_resource_try_acquire() immediately passes that handle to nfp_cpp_mutex_trylock(). However, nfp_cpp_mutex_alloc() returns NULL on failure. If that happens for a matching table entry, the resource lookup still returns success and the following trylock dereferences a NULL mutex pointer while opening the resource. nfp_resource_acquire() already treats failure to allocate the table mutex as -ENOMEM. Do the same for the resource mutex and fail the lookup before publishing the rest of the resource handle. This issue was found by a static analysis checker and confirmed by manual source review.
How to fix
- Linux Linux18737a48acc87e4cbe41d6fea9a3f44eae490e24, 423523f96a681428ce6e214eaf47f0d8242319de, 0dbd85a8cc35c14bd26e686fa5fae8c64a7958ae, 6dbd428119cb1fd1b73cf6968c711f4ea964dc8b, cfa119aa781c4044dab5b4c1e5864600f53a26bc, 3b1d4fc3b73ea6faf008a0996ce6190c6e43efc3, a7dc30b6828c3a30252892827b12b676749f250f, a61b4db34a753bdf5c9e77a7f3d3dddd41dcfacc or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | f01a2161577d31b14581e0db3bbbdfa963f145b6 ≤ v < 18737a48acc87e4cbe41d6fea9a3f44eae490e24, f01a2161577d31b14581e0db3bbbdfa963f145b6 ≤ v < 423523f96a681428ce6e214eaf47f0d8242319de, f01a2161577d31b14581e0db3bbbdfa963f145b6 ≤ v < 0dbd85a8cc35c14bd26e686fa5fae8c64a7958ae, f01a2161577d31b14581e0db3bbbdfa963f145b6 ≤ v < 6dbd428119cb1fd1b73cf6968c711f4ea964dc8b, f01a2161577d31b14581e0db3bbbdfa963f145b6 ≤ v < cfa119aa781c4044dab5b4c1e5864600f53a26bc, f01a2161577d31b14581e0db3bbbdfa963f145b6 ≤ v < 3b1d4fc3b73ea6faf008a0996ce6190c6e43efc3, f01a2161577d31b14581e0db3bbbdfa963f145b6 ≤ v < a7dc30b6828c3a30252892827b12b676749f250f, f01a2161577d31b14581e0db3bbbdfa963f145b6 ≤ v < a61b4db34a753bdf5c9e77a7f3d3dddd41dcfacc, 4.11 | 18737a48acc87e4cbe41d6fea9a3f44eae490e24, 423523f96a681428ce6e214eaf47f0d8242319de, 0dbd85a8cc35c14bd26e686fa5fae8c64a7958ae, 6dbd428119cb1fd1b73cf6968c711f4ea964dc8b, cfa119aa781c4044dab5b4c1e5864600f53a26bc, 3b1d4fc3b73ea6faf008a0996ce6190c6e43efc3, a7dc30b6828c3a30252892827b12b676749f250f, a61b4db34a753bdf5c9e77a7f3d3dddd41dcfacc |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.