[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-23438":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-30T21:17:53.703Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":58,"related":59,"reserved_at":9,"published_at":71,"modified_at":72,"state":73,"summary":74,"references_raw":83,"kevs":122,"epss":123,"epss_history":126,"metrics":396,"affected":402},"CVE-2026-23438","In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mvpp2: guard flow control update with global_tx_fc in buffer switching\n\nmvpp2_bm_switch_buffers() unconditionally calls\nmvpp2_bm_pool_update_priv_fc() when switching between per-cpu and\nshared buffer pool modes. This function programs CM3 flow control\nregisters via mvpp2_cm3_read()/mvpp2_cm3_write(), which dereference\npriv->cm3_base without any NULL check.\n\nWhen the CM3 SRAM resource is not present in the device tree (the\nthird reg entry added by commit 60523583b07c (\"dts: marvell: add CM3\nSRAM memory to cp11x ethernet device tree\")), priv->cm3_base remains\nNULL and priv->global_tx_fc is false. Any operation that triggers\nmvpp2_bm_switch_buffers(), for example an MTU change that crosses\nthe jumbo frame threshold, will crash:\n\n  Unable to handle kernel NULL pointer dereference at\n  virtual address 0000000000000000\n  Mem abort info:\n    ESR = 0x0000000096000006\n    EC = 0x25: DABT (current EL), IL = 32 bits\n  pc : readl+0x0/0x18\n  lr : mvpp2_cm3_read.isra.0+0x14/0x20\n  Call trace:\n   readl+0x0/0x18\n   mvpp2_bm_pool_update_fc+0x40/0x12c\n   mvpp2_bm_pool_update_priv_fc+0x94/0xd8\n   mvpp2_bm_switch_buffers.isra.0+0x80/0x1c0\n   mvpp2_change_mtu+0x140/0x380\n   __dev_set_mtu+0x1c/0x38\n   dev_set_mtu_ext+0x78/0x118\n   dev_set_mtu+0x48/0xa8\n   dev_ifsioc+0x21c/0x43c\n   dev_ioctl+0x2d8/0x42c\n   sock_ioctl+0x314/0x378\n\nEvery other flow control call site in the driver already guards\nhardware access with either priv->global_tx_fc or port->tx_fc.\nmvpp2_bm_switch_buffers() is the only place that omits this check.\n\nAdd the missing priv->global_tx_fc guard to both the disable and\nre-enable calls in mvpp2_bm_switch_buffers(), consistent with the\nrest of the driver.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-476","NULL Pointer Dereference","The product dereferences a pointer that it expects to be valid but is NULL.","weakness","Stable","Base","Medium",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56],{"_key":25},"DEBIAN-CVE-2026-23438",{"_key":27},"SUSE-SU-2026:22108-1",{"_key":29},"SUSE-SU-2026:22127-1",{"_key":31},"SUSE-SU-2026:22112-1",{"_key":33},"SUSE-SU-2026:22099-1",{"_key":35},"SUSE-SU-2026:22137-1",{"_key":37},"SUSE-SU-2026:2482-1",{"_key":39},"SUSE-SU-2026:2591-1",{"_key":41},"OPENSUSE-SU-2026:20965-1",{"_key":43},"SUSE-SU-2026:22117-1",{"_key":45},"SUSE-SU-2026:22433-1",{"_key":47},"SUSE-SU-2026:22458-1",{"_key":49},"UBUNTU-CVE-2026-23438",{"_key":51},"USN-8567-1",{"_key":53},"USN-8574-1",{"_key":55},"USN-8575-1",{"_key":57},"USN-8576-1",[],[60,61,62,63,64,65,66,67,68,69,70],{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},"2026-04-03T15:15:22.701Z","2026-07-14T12:47:01.882Z","Analyzed",{"cisa_kev":75,"cisa_ransomware":75,"cisa_vendor":9,"epss_severity":76,"epss_score":77,"severity":78,"severity_score":79,"severity_version":80,"severity_source":81,"severity_vector":82,"severity_status":73},false,"low",0.00123,"medium",5.5,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",[84,90,94,98,102,106,110,114,118],{"url":85,"sources":86,"tags":88},"https://git.kernel.org/stable/c/da089f74a993f846685067b14158cb41b879ff29",[87,81],"cve.org",[89],"Patch",{"url":91,"sources":92,"tags":93},"https://git.kernel.org/stable/c/ff0c54f088f7ab91dbbf47cf8244460f99122750",[87,81],[89],{"url":95,"sources":96,"tags":97},"https://git.kernel.org/stable/c/7bd20f4b3ef3044dc55acd5b8ef748a70d29d03f",[87,81],[89],{"url":99,"sources":100,"tags":101},"https://git.kernel.org/stable/c/7df2b50cae1a76cbb90b294f3edb61e3e10bf2e9",[87,81],[89],{"url":103,"sources":104,"tags":105},"https://git.kernel.org/stable/c/8baced53a35fc9710f80d6ca016a2c418dc3231f",[87,81],[89],{"url":107,"sources":108,"tags":109},"https://git.kernel.org/stable/c/8a63baadf08453f66eb582fdb6dd234f72024723",[87,81],[89],{"url":111,"sources":112,"tags":113},"https://git.kernel.org/stable/c/0cfcd31f98fc608dc9406bff3fee3a9dd364d014",[87,81],[89],{"url":115,"sources":116,"tags":117},"https://cert-portal.siemens.com/productcert/html/ssa-082556.html",[87],[],{"url":119,"sources":120,"tags":121},"https://cert-portal.siemens.com/productcert/html/ssa-019113.html",[87],[],[],{"date":124,"score":77,"percentile":125},"2026-07-05",0.02393,[127,131,134,137,140,143,147,150,153,156,159,162,165,168,171,174,177,180,183,186,189,193,196,199,202,205,208,211,214,217,220,223,227,230,233,236,239,242,245,248,251,254,257,260,262,265,268,271,274,277,280,283,286,289,292,294,297,300,303,306,309,312,315,318,321,324,327,329,333,336,339,342,345,348,351,354,357,360,363,366,369,371,374,376,379,382,384,387,390,393],{"date":128,"score":129,"percentile":130},"2026-04-04",0.00024,0.0664,{"date":132,"score":129,"percentile":133},"2026-04-05",0.06635,{"date":135,"score":129,"percentile":136},"2026-04-06",0.06601,{"date":138,"score":129,"percentile":139},"2026-04-07",0.06619,{"date":141,"score":129,"percentile":142},"2026-04-08",0.06669,{"date":144,"score":145,"percentile":146},"2026-04-09",0.00032,0.09265,{"date":148,"score":145,"percentile":149},"2026-04-10",0.09272,{"date":151,"score":145,"percentile":152},"2026-04-11",0.09267,{"date":154,"score":145,"percentile":155},"2026-04-12",0.09236,{"date":157,"score":145,"percentile":158},"2026-04-13",0.09222,{"date":160,"score":145,"percentile":161},"2026-04-14",0.09095,{"date":163,"score":145,"percentile":164},"2026-04-15",0.0911,{"date":166,"score":145,"percentile":167},"2026-04-16",0.09117,{"date":169,"score":145,"percentile":170},"2026-04-17",0.09101,{"date":172,"score":145,"percentile":173},"2026-04-18",0.09098,{"date":175,"score":145,"percentile":176},"2026-04-19",0.09068,{"date":178,"score":145,"percentile":179},"2026-04-20",0.09055,{"date":181,"score":145,"percentile":182},"2026-04-21",0.09252,{"date":184,"score":145,"percentile":185},"2026-04-22",0.09287,{"date":187,"score":145,"percentile":188},"2026-04-23",0.09309,{"date":190,"score":191,"percentile":192},"2026-04-24",0.00013,0.02265,{"date":194,"score":191,"percentile":195},"2026-04-25",0.02275,{"date":197,"score":191,"percentile":198},"2026-04-26",0.02257,{"date":200,"score":191,"percentile":201},"2026-04-27",0.02274,{"date":203,"score":191,"percentile":204},"2026-04-28",0.0229,{"date":206,"score":191,"percentile":207},"2026-04-29",0.02304,{"date":209,"score":191,"percentile":210},"2026-04-30",0.02306,{"date":212,"score":191,"percentile":213},"2026-05-01",0.02301,{"date":215,"score":191,"percentile":216},"2026-05-02",0.02287,{"date":218,"score":191,"percentile":219},"2026-05-03",0.02291,{"date":221,"score":191,"percentile":222},"2026-05-04",0.02285,{"date":224,"score":225,"percentile":226},"2026-05-05",0.00015,0.03238,{"date":228,"score":225,"percentile":229},"2026-05-06",0.0324,{"date":231,"score":225,"percentile":232},"2026-05-07",0.03263,{"date":234,"score":225,"percentile":235},"2026-05-08",0.03276,{"date":237,"score":225,"percentile":238},"2026-05-09",0.03301,{"date":240,"score":225,"percentile":241},"2026-05-10",0.03315,{"date":243,"score":225,"percentile":244},"2026-05-11",0.03306,{"date":246,"score":225,"percentile":247},"2026-05-12",0.03314,{"date":249,"score":225,"percentile":250},"2026-05-13",0.03335,{"date":252,"score":225,"percentile":253},"2026-05-14",0.03346,{"date":255,"score":225,"percentile":256},"2026-05-15",0.03362,{"date":258,"score":225,"percentile":259},"2026-05-16",0.03373,{"date":261,"score":225,"percentile":259},"2026-05-17",{"date":263,"score":225,"percentile":264},"2026-05-18",0.03348,{"date":266,"score":225,"percentile":267},"2026-05-19",0.03341,{"date":269,"score":225,"percentile":270},"2026-05-20",0.03344,{"date":272,"score":225,"percentile":273},"2026-05-21",0.03339,{"date":275,"score":225,"percentile":276},"2026-05-22",0.03512,{"date":278,"score":225,"percentile":279},"2026-05-23",0.03499,{"date":281,"score":225,"percentile":282},"2026-05-24",0.03483,{"date":284,"score":225,"percentile":285},"2026-05-25",0.03463,{"date":287,"score":225,"percentile":288},"2026-05-26",0.03446,{"date":290,"score":225,"percentile":291},"2026-05-27",0.0347,{"date":293,"score":225,"percentile":288},"2026-05-28",{"date":295,"score":225,"percentile":296},"2026-05-29",0.03453,{"date":298,"score":225,"percentile":299},"2026-05-30",0.03482,{"date":301,"score":225,"percentile":302},"2026-05-31",0.03469,{"date":304,"score":225,"percentile":305},"2026-06-01",0.03412,{"date":307,"score":225,"percentile":308},"2026-06-02",0.03388,{"date":310,"score":225,"percentile":311},"2026-06-03",0.03378,{"date":313,"score":225,"percentile":314},"2026-06-04",0.03376,{"date":316,"score":225,"percentile":317},"2026-06-05",0.03384,{"date":319,"score":225,"percentile":320},"2026-06-06",0.03397,{"date":322,"score":225,"percentile":323},"2026-06-07",0.03382,{"date":325,"score":225,"percentile":326},"2026-06-08",0.03361,{"date":328,"score":225,"percentile":326},"2026-06-09",{"date":330,"score":331,"percentile":332},"2026-06-10",0.00018,0.04695,{"date":334,"score":331,"percentile":335},"2026-06-11",0.04709,{"date":337,"score":331,"percentile":338},"2026-06-12",0.0471,{"date":340,"score":331,"percentile":341},"2026-06-13",0.04696,{"date":343,"score":331,"percentile":344},"2026-06-14",0.04688,{"date":346,"score":77,"percentile":347},"2026-06-15",0.02352,{"date":349,"score":77,"percentile":350},"2026-06-16",0.02355,{"date":352,"score":77,"percentile":353},"2026-06-17",0.02385,{"date":355,"score":77,"percentile":356},"2026-06-18",0.02374,{"date":358,"score":77,"percentile":359},"2026-06-19",0.02372,{"date":361,"score":77,"percentile":362},"2026-06-20",0.02386,{"date":364,"score":77,"percentile":365},"2026-06-21",0.0238,{"date":367,"score":77,"percentile":368},"2026-06-22",0.02371,{"date":370,"score":77,"percentile":365},"2026-06-23",{"date":372,"score":77,"percentile":373},"2026-06-24",0.02379,{"date":375,"score":77,"percentile":347},"2026-06-25",{"date":377,"score":77,"percentile":378},"2026-06-26",0.02369,{"date":380,"score":77,"percentile":381},"2026-06-27",0.02388,{"date":383,"score":77,"percentile":368},"2026-06-28",{"date":385,"score":77,"percentile":386},"2026-06-29",0.02373,{"date":388,"score":77,"percentile":389},"2026-06-30",0.02357,{"date":391,"score":77,"percentile":392},"2026-07-01",0.02402,{"date":394,"score":77,"percentile":395},"2026-07-02",0.02368,[397],{"source":81,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":398,"cvss_v4_0":9},{"baseScore":79,"baseSeverity":399,"vectorString":82,"impactScore":400,"exploitabilityScore":401},"MEDIUM",6,4.6,[403,435],{"ecosystem":9,"name":404,"vendor":405,"product":405,"cpe_part":406,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":407},"Linux","linux","a",[408,415,418,421,424,427,430,433],{"version":409,"is_range":410,"range_type":87,"version_start":411,"version_start_type":412,"version_end":413,"version_end_type":414,"fixed_in":9},">= 3a616b92a9d17448d96a33bf58e69f01457fd43a, \u003C 0cfcd31f98fc608dc9406bff3fee3a9dd364d014",true,"3a616b92a9d17448d96a33bf58e69f01457fd43a","including","0cfcd31f98fc608dc9406bff3fee3a9dd364d014","excluding",{"version":416,"is_range":410,"range_type":87,"version_start":411,"version_start_type":412,"version_end":417,"version_end_type":414,"fixed_in":9},">= 3a616b92a9d17448d96a33bf58e69f01457fd43a, \u003C da089f74a993f846685067b14158cb41b879ff29","da089f74a993f846685067b14158cb41b879ff29",{"version":419,"is_range":410,"range_type":87,"version_start":411,"version_start_type":412,"version_end":420,"version_end_type":414,"fixed_in":9},">= 3a616b92a9d17448d96a33bf58e69f01457fd43a, \u003C ff0c54f088f7ab91dbbf47cf8244460f99122750","ff0c54f088f7ab91dbbf47cf8244460f99122750",{"version":422,"is_range":410,"range_type":87,"version_start":411,"version_start_type":412,"version_end":423,"version_end_type":414,"fixed_in":9},">= 3a616b92a9d17448d96a33bf58e69f01457fd43a, \u003C 7bd20f4b3ef3044dc55acd5b8ef748a70d29d03f","7bd20f4b3ef3044dc55acd5b8ef748a70d29d03f",{"version":425,"is_range":410,"range_type":87,"version_start":411,"version_start_type":412,"version_end":426,"version_end_type":414,"fixed_in":9},">= 3a616b92a9d17448d96a33bf58e69f01457fd43a, \u003C 7df2b50cae1a76cbb90b294f3edb61e3e10bf2e9","7df2b50cae1a76cbb90b294f3edb61e3e10bf2e9",{"version":428,"is_range":410,"range_type":87,"version_start":411,"version_start_type":412,"version_end":429,"version_end_type":414,"fixed_in":9},">= 3a616b92a9d17448d96a33bf58e69f01457fd43a, \u003C 8baced53a35fc9710f80d6ca016a2c418dc3231f","8baced53a35fc9710f80d6ca016a2c418dc3231f",{"version":431,"is_range":410,"range_type":87,"version_start":411,"version_start_type":412,"version_end":432,"version_end_type":414,"fixed_in":9},">= 3a616b92a9d17448d96a33bf58e69f01457fd43a, \u003C 8a63baadf08453f66eb582fdb6dd234f72024723","8a63baadf08453f66eb582fdb6dd234f72024723",{"version":434,"is_range":75,"range_type":87,"version_start":434,"version_start_type":412,"version_end":434,"version_end_type":412,"fixed_in":9},"5.12",{"ecosystem":9,"name":436,"vendor":405,"product":437,"cpe_part":406,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":438},"Linux Kernel","linux kernel",[439,444,448,452,456,460,464,465,467,469,471,473,475,477],{"version":440,"is_range":410,"range_type":441,"version_start":442,"version_start_type":412,"version_end":443,"version_end_type":414,"fixed_in":9},"gte5.12.1_lt5.15.203","cpe","5.12.1","5.15.203",{"version":445,"is_range":410,"range_type":441,"version_start":446,"version_start_type":412,"version_end":447,"version_end_type":414,"fixed_in":9},"gte5.16_lt6.1.167","5.16","6.1.167",{"version":449,"is_range":410,"range_type":441,"version_start":450,"version_start_type":412,"version_end":451,"version_end_type":414,"fixed_in":9},"gte6.2_lt6.6.130","6.2","6.6.130",{"version":453,"is_range":410,"range_type":441,"version_start":454,"version_start_type":412,"version_end":455,"version_end_type":414,"fixed_in":9},"gte6.7_lt6.12.78","6.7","6.12.78",{"version":457,"is_range":410,"range_type":441,"version_start":458,"version_start_type":412,"version_end":459,"version_end_type":414,"fixed_in":9},"gte6.13_lt6.18.20","6.13","6.18.20",{"version":461,"is_range":410,"range_type":441,"version_start":462,"version_start_type":412,"version_end":463,"version_end_type":414,"fixed_in":9},"gte6.19_lt6.19.10","6.19","6.19.10",{"version":434,"is_range":75,"range_type":441,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":466,"is_range":75,"range_type":441,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc1",{"version":468,"is_range":75,"range_type":441,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc2",{"version":470,"is_range":75,"range_type":441,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc3",{"version":472,"is_range":75,"range_type":441,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc4",{"version":474,"is_range":75,"range_type":441,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc5",{"version":476,"is_range":75,"range_type":441,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc6",{"version":478,"is_range":75,"range_type":441,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc7"]