NULL Pointer Dereference Vulnerability in Linux Kernel by Vendor

CVE-2026-43282

What is CVE-2026-43282?

The Linux kernel contains a vulnerability in the ionic_query_port function, which fails to validate the return value from ib_device_get_netdev(). This oversight can result in a NULL pointer dereference, potentially impacting system stability and performance. The issue has been mitigated by adding a return check for the device, ensuring that a NULL device leads to an -ENODEV error return. Proper checks in code are crucial to maintain kernel integrity and prevent unexpected behavior.

References