CVE-2026-68291

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the idpf driver where a kernel NULL pointer dereference can occur. This happens when adapter->max vports is set before the successful allocation of vports, netdevs, and vport config buffers. If an allocation error occurs during initialization, subsequent operations such as a device reset or the removal of the module via rmmod can trigger a system crash. The crash is specifically observed in the idpf remove() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.