Linux Kernel Vulnerability in Net: lan966x Product by Linux

CVE-2026-31646

What is CVE-2026-31646?

A vulnerability in the Linux kernel has been identified within the net: lan966x component, where improper error handling during page pool allocation can lead to a kernel oops. The page_pool_create() function has the potential to return an ERR_PTR signal upon failure. If this error pointer is used without proper validation in subsequent processing loops, it can lead to system instability. To mitigate this issue, an IS_ERR check should be implemented to handle failures appropriately and avoid dereferencing error pointers that can crash the system.

References