Log in Start free

Vulnerability · Published Feb 4, 2026 · Assigned by Linux

CVE-2026-23084be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list

Medium 5.5

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 4% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 95.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list When the parameter pmac_id_valid argument of be_cmd_get_mac_from_list() is set to false, the driver may request the PMAC_ID from the firmware of the network card, and this function will store that PMAC_ID at the provided address pmac_id. This is the contract of this function. However, there is a location within the driver where both pmac_id_valid == false and pmac_id == NULL are being passed. This could result in dereferencing a NULL pointer. To resolve this issue, it is necessary to pass the address of a stub variable to the function.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.162-1DEBIAN-CVE-2026-23084
Debian:13linux6.12.69-1DEBIAN-CVE-2026-23084
Debian:14linux6.18.8-1DEBIAN-CVE-2026-23084
Ubuntu:22.04:LTSlinux5.15.0-176.186UBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux6.8.0-117.117UBUNTU-CVE-2026-23084
Ubuntu:25.10linuxno fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-aws5.15.0-1105.112UBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-aws6.8.0-1055.58UBUNTU-CVE-2026-23084
Ubuntu:25.10linux-awsno fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1057.60~22.04.1UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-azure5.15.0-1110.119UBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-azure6.8.0-1056.62UBUNTU-CVE-2026-23084
Ubuntu:25.10linux-azureno fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-azure-6.176.17.0-1021.21~24.04.1UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1059.65~22.04.1UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1114.123UBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1058.65UBUNTU-CVE-2026-23084
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1058.65~22.04.1UBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-gcp5.15.0-1105.114UBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-gcp6.8.0-1058.61UBUNTU-CVE-2026-23084
Ubuntu:25.10linux-gcpno fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1021.24~24.04.1UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1060.63~22.04.1UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-gke5.15.0-1101.107UBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-gke6.8.0-1054.60UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1088.96UBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1041.44UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-hwe-6.176.17.0-41.41~24.04.1UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-124.124~22.04.1UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-ibm5.15.0-1099.102UBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-ibm6.8.0-1055.56UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1055.56~22.04.1UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1100.106UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-kvm5.15.0-1097.102UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-175.185UBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-117.117.1UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-117.117.1~22.04.1UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1100.101UBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1054.57UBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-nvidia-6.176.17.0-1031.31UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1054.57~22.04.1UBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1054.57.1UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1057.57UBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1024.24UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1046.46UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1030.30UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-oracle5.15.0-1102.108UBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-oracle6.8.0-1054.55UBUNTU-CVE-2026-23084
Ubuntu:25.10linux-oracleno fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1019.19~24.04.3UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1054.55~22.04.1UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-raspi5.15.0-1099.102UBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-raspi6.8.0-1056.60UBUNTU-CVE-2026-23084
Ubuntu:25.10linux-raspino fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-23084
Ubuntu:25.10linux-realtimeno fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-23084
Ubuntu:25.10linux-riscvno fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-117.117~22.04.1UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-23084
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1032.33UBUNTU-CVE-2026-23084
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1070.74UBUNTU-CVE-2026-23084

Affected products (as reported)

VendorProductVersions
Linux Linux 95046b927a54f461766f83a212c6a93bc5fd2e67 – before 4cba480c9b9a3861a515262225cb53a1f597834495046b927a54f461766f83a212c6a93bc5fd2e67 – before 92c6dc181a18e6e0ddb872ed35cb48a9274829e495046b927a54f461766f83a212c6a93bc5fd2e67 – before 6c3e00888dbec887125a08b51a705b9b163fcdd195046b927a54f461766f83a212c6a93bc5fd2e67 – before e206fb415db36bad52bb90c08d46ce71ffbe8a8095046b927a54f461766f83a212c6a93bc5fd2e67 – before 47ffb4dcffe336f4a7bd0f3284be7aadc648469895046b927a54f461766f83a212c6a93bc5fd2e67 – before 31410a01a86bcb98c798d01061abf1f789c4f75a95046b927a54f461766f83a212c6a93bc5fd2e67 – before 8215794403d264739cc676668087512950b2ff31
Linux Linux 3.12

Weakness: CWE-476

References