AZL-77259
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-77259.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-77259
- Upstream
- Published
- 2026-02-04T17:16:19Z
- Modified
- 2026-08-28T17:47:42Z
- Summary
- CVE-2026-23084 affecting package kernel for versions less than 6.6.126.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list
When the parameter pmac_id_valid argument of be_cmd_get_mac_from_list() is set to false, the driver may request the PMAC_ID from the firmware of the network card, and this function will store that PMAC_ID at the provided address pmac_id. This is the contract of this function.
However, there is a location within the driver where both pmac_id_valid == false and pmac_id == NULL are being passed. This could result in dereferencing a NULL pointer.
To resolve this issue, it is necessary to pass the address of a stub variable to the function.
- References