CVE-2026-43282

Awaiting Analysis Awaiting Analysis - Queue

NULL Pointer Dereference in Linux Kernel RDMA/ionic Driver

Publication date: 2026-05-06

Last updated on: 2026-05-08

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix potential NULL pointer dereference in ionic_query_port The function ionic_query_port() calls ib_device_get_netdev() without checking the return value which could lead to NULL pointer dereference, Fix it by checking the return value and return -ENODEV if the 'ndev' is NULL.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-06

Last Modified

2026-05-08

Generated

2026-07-07

AI Q&A

2026-05-06

EPSS Evaluated

2026-07-05

NVD

CVE-2026-43282

EUVD

EUVD-2026-27679

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.0
linux	linux_kernel	From 6.19 (inc) to 6.19.6 (exc)
linux	linux_kernel	From 6.18 (inc) to 6.18.16 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's RDMA/ionic component. Specifically, the function ionic_query_port() calls another function, ib_device_get_netdev(), without verifying if the returned value is NULL. This lack of checking can lead to a NULL pointer dereference, which is a type of error where the program tries to access or use a memory location that is not valid.

The issue was fixed by adding a check for the return value and returning an error code (-ENODEV) if the network device pointer ('ndev') is NULL.

Impact Analysis

A NULL pointer dereference in the kernel can cause the affected system to crash or become unstable, potentially leading to a denial of service (DoS). This means that an attacker or a faulty process could exploit this vulnerability to disrupt normal operations of the system running the Linux kernel.

Hi! I’m here to help you understand CVE-2026-43282. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70