CVE-2026-23042

In the Linux kernel, the following vulnerability has been resolved:

idpf: fix aux device unplugging when rdma is not supported by vport

If vport flags do not contain VIRTCHNL2_VPORT_ENABLE_RDMA, driver does not allocate vdev_info for this vport. This leads to kernel NULL pointer dereference in idpf_idc_vport_dev_down(), which references vdev_info for every vport regardless.

Check, if vdev_info was ever allocated before unplugging aux device.

The idpf driver can hit a NULL pointer dereference when unplugging the RDMA auxiliary device for a vport that does not support RDMA. If the vport flags do not include VIRTCHNL2_VPORT_ENABLE_RDMA then vdev_info is never allocated. The teardown path idpf_idc_vport_dev_down still assumes vdev_info exists and dereferences it which can crash the kernel. For the CVSS the PR is L in the paranoid score because some deployments delegate network administration to containers or services that can trigger device reset or teardown paths. In typical systems PR is H because driver unload and device management are administrator operations. The issue is not network reachable. Impact is denial of service via kernel crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.