CVE-2026-23019

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s networking subsystem related to Marvell Prestera devices. A failure in the devlink alloc() function to allocate memory can lead to a NULL pointer dereference within the prestera devlink alloc() function when it unconditionally calls devlink priv() on the returned pointer. This can cause a system crash. The issue arises because devlink alloc() may return NULL upon allocation failure, but the code does not check for this condition before attempting to access the returned pointer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.