What’s Vulnerable › Vulnerabilities

CVE-2026-23020: net: 3com: 3c59x: fix possible null dereference in vortex_probe1()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-31 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: net: 3com: 3c59x: fix possible null dereference in vortex_probe1() pdev can be null and free_ring: can be called in 1297 with a null pdev.

Affected products

• Linux kernel: from 4.16.12 before 4.17; from 4.17.1 before 5.10.248; from 5.11 before 5.15.198; from 5.16 before 6.1.161; from 6.2 before 6.6.121; from 6.7 before 6.12.66 — fixed in 4.17, 5.10.248, 5.15.198, 6.1.161, 6.12.66, 6.18.6

How to fix

Upgrade to a fixed version: Linux kernel 4.17, 5.10.248, 5.15.198, 6.1.161. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/053ac9e37eee435e999277c0f1ef890dad6064bf
• https://git.kernel.org/stable/c/28b2a805609699be7b90020ae7dccfb234be1ceb
• https://git.kernel.org/stable/c/2f05f7737e16d9a40038cc1c38a96a3f7964898b
• https://git.kernel.org/stable/c/606872c8e8bf96066730f6a2317502c5633c37f1
• https://git.kernel.org/stable/c/6cff14b831dbdb32675b4c7904dcc3eeeaf47e9d
• https://git.kernel.org/stable/c/a4e305ed60f7c41bbf9aabc16dd75267194e0de3
• https://git.kernel.org/stable/c/d82796a57cc0dac1dbef19d913c8f02a8cc7b1a7

Get alerted when CVE-2026-23020 or the next vulnerability affects your stack