Not yet scoredPublished Feb 4, 2026

CVE-2026-23042idpf: fix aux device unplugging when rdma is not supported by vport

Updated under an hour ago (Oct 27, 2026, 10:10 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: idpf: fix aux device unplugging when rdma is not supported by vport If vport flags do not contain VIRTCHNL2_VPORT_ENABLE_RDMA, driver does not allocate vdev_info for this vport. This leads to kernel NULL pointer dereference in idpf_idc_vport_dev_down(), which references vdev_info for every vport regardless. Check, if vdev_info was ever allocated before unplugging aux device.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from be91128c579c86d295da4325f6ac4710e4e6d2b4 before 0ad6d6e50e9d8bf596cfe77a882ddc20b29f525a; from be91128c579c86d295da4325f6ac4710e4e6d2b4 before 4648fb2f2e7210c53b85220ee07d42d1e4bae3f9	CNA record

References

References

https://git.kernel.org/stable/c/0ad6d6e50e9d8bf596cfe77a882ddc20b29f525a
https://git.kernel.org/stable/c/4648fb2f2e7210c53b85220ee07d42d1e4bae3f9

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.