In the Linux kernel, the following vulnerability has been resolved:
idpf: fix aux device unplugging when rdma is not supported by vport
If vport flags do not contain VIRTCHNL2_VPORT_ENABLE_RDMA, driver does not
allocate vdev_info for this vport. This leads to kernel NULL pointer
dereference in idpf_idc_vport_dev_down(), which references vdev_info for
every vport regardless.
Check, if vdev_info was ever allocated before unplugging aux device.
CVE-2026-23042
NONE
EPSS 0.03%
Updated Feb 04, 2026
In
CVE Details
CVE ID
CVE-2026-23042
Published Date
Feb 04, 2026
Vendor
In
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.03%
Likelihood of exploitation in next 30 days
Percentile:
6.9th percentile (higher than 6.9% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory