Medium 5.5Published Feb 4, 2026

CVE-2026-23084be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list

Updated under an hour ago (Oct 27, 2026, 9:00 PM ET)

Does this affect you?

It affects Linux and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list When the parameter pmac_id_valid argument of be_cmd_get_mac_from_list() is set to false, the driver may request the PMAC_ID from the firmware of the network card, and this function will store that PMAC_ID at the provided address pmac_id. This is the contract of this function. However, there is a location within the driver where both pmac_id_valid == false and pmac_id == NULL are being passed. This could result in dereferencing a NULL pointer. To resolve this issue, it is necessary to pass the address of a stub variable to the function.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): CWE-476
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	95046b927a54f461766f83a212c6a93bc5fd2e67 builds before 4cba480c9b9a3861a515262225cb53a1f5978344; 95046b927a54f461766f83a212c6a93bc5fd2e67 builds before 92c6dc181a18e6e0ddb872ed35cb48a9274829e4; 95046b927a54f461766f83a212c6a93bc5fd2e67 builds before 6c3e00888dbec887125a08b51a705b9b163fcdd1; from 95046b927a54f461766f83a212c6a93bc5fd2e67 before e206fb415db36bad52bb90c08d46ce71ffbe8a80; 95046b927a54f461766f83a212c6a93bc5fd2e67 builds before 47ffb4dcffe336f4a7bd0f3284be7aadc6484698; 95046b927a54f461766f83a212c6a93bc5fd2e67 builds before 31410a01a86bcb98c798d01061abf1f789c4f75a; from 95046b927a54f461766f83a212c6a93bc5fd2e67 before 8215794403d264739cc676668087512950b2ff31	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
linux linux_kernel linux:linux_kernel	from 3.12 before 5.10.249; from 5.11 before 5.15.199; from 5.16 before 6.1.162; from 6.2 before 6.6.122; from 6.7 before 6.12.68; from 6.13 before 6.18.8; 6.19; 6.19; and 4 more ranges	NVD

References

References

https://git.kernel.org/stable/c/4cba480c9b9a3861a515262225cb53a1f5978344	patch
https://git.kernel.org/stable/c/92c6dc181a18e6e0ddb872ed35cb48a9274829e4	patch
https://git.kernel.org/stable/c/6c3e00888dbec887125a08b51a705b9b163fcdd1	patch
https://git.kernel.org/stable/c/e206fb415db36bad52bb90c08d46ce71ffbe8a80	patch
https://git.kernel.org/stable/c/47ffb4dcffe336f4a7bd0f3284be7aadc6484698	patch
https://git.kernel.org/stable/c/31410a01a86bcb98c798d01061abf1f789c4f75a	patch
https://git.kernel.org/stable/c/8215794403d264739cc676668087512950b2ff31	patch
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-457936.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.