CVE-2026-23019
kernel: net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · January 31, 2026
Updated · June 28, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
devlink_alloc() may return NULL on allocation failure, but prestera_devlink_alloc() unconditionally calls devlink_priv() on the returned pointer.
This leads to a NULL pointer dereference if devlink allocation fails. Add a check for a NULL devlink pointer and return NULL early to avoid the crash.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified