Get a Demo

Let's Patch It!

Book a short call with one our specialists, we'll walk you through how Endor Patches work, and ask you a few questions about your environment (like your primary programming languages and repository management). We'll also send you an email right after you fill out the form, feel free to reply with any questions you have in advance!

CVE

DEBIAN-CVE-2026-23180

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: add bounds check for if_id in IRQ handler The IRQ handler extracts if_id from the upper 16 bits of the hardware stat...
Back to all
CVE

DEBIAN-CVE-2026-23180

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: add bounds check for if_id in IRQ handler The IRQ handler extracts if_id from the upper 16 bits of the hardware stat...

In the Linux kernel, the following vulnerability has been resolved:  dpaa2-switch: add bounds check for ifid in IRQ handler  The IRQ handler extracts ifid from the upper 16 bits of the hardware status register and uses it to index into ethsw->ports[] without validation. Since ifid can be any 16-bit value (0-65535) but the ports array is only allocated with swattr.numifs elements, this can lead to an out-of-bounds read potentially.  Add a bounds check before accessing the array, consistent with the existing validation in dpaa2switch_rx().

Package Versions Affected

Package Version
patch Availability
No items found.

Automatically patch vulnerabilities without upgrading

Fix Without Upgrading
Detect compatible fix
Apply safe remediation
Fix with a single pull request

CVSS Version

Severity
Base Score
CVSS Version
Score Vector
C
H
U
-
C
H
U
0
-
3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
C
H
U
-

Related Resources

No items found.

References

https://security-tracker.debian.org/tracker/CVE-2026-23180

Severity

7

CVSS Score
0
10

Basic Information

Ecosystem
Base CVSS
7
EPSS Probability
0%
EPSS Percentile
0%
Introduced Version
0
Fix Available
6.1.164-1,6.12.73-1,6.18.10-1,6.1.164-1~deb11u1

Fix Critical Vulnerabilities Instantly

Secure your app without upgrading.
Fix Without Upgrading