CVE-2026-23084
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
04/02/2026
Last modified:
04/02/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list<br />
<br />
When the parameter pmac_id_valid argument of be_cmd_get_mac_from_list() is<br />
set to false, the driver may request the PMAC_ID from the firmware of the<br />
network card, and this function will store that PMAC_ID at the provided<br />
address pmac_id. This is the contract of this function.<br />
<br />
However, there is a location within the driver where both<br />
pmac_id_valid == false and pmac_id == NULL are being passed. This could<br />
result in dereferencing a NULL pointer.<br />
<br />
To resolve this issue, it is necessary to pass the address of a stub<br />
variable to the function.



