Answer in brief
CVE-2026-23180 records a High severity (CVSS 7.0) vulnerability in dpaa2-switch: add bounds check for if_id in IRQ handler. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.0. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=24ab724f8a4661b2dc8e696b41df93bdc108f7a1 <77611cab5bdfff7a070ae574bbfba20a1de99d1b || >=24ab724f8a4661b2dc8e696b41df93bdc108f7a1 <34b56c16efd61325d80bf1d780d0e176be662f59 || >=24ab724f8a4661b2dc8e696b41df93bdc108f7a1 <f89e33c9c37f0001b730e23b3b05ab7b1ecface2 || >=24ab724f8a4661b2dc8e696b41df93bdc108f7a1 <2447edc367800ba914acf7ddd5d250416b45fb31 || >=24ab724f8a4661b2dc8e696b41df93bdc108f7a1 <1b381a638e1851d8cfdfe08ed9cdbec5295b18c9 || >=24ab724f8a4661b2dc8e696b41df93bdc108f7a1 <31a7a0bbeb006bac2d9c81a2874825025214b6d8 | 77611cab5bdfff7a070ae574bbfba20a1de99d1b, 34b56c16efd61325d80bf1d780d0e176be662f59, f89e33c9c37f0001b730e23b3b05ab7b1ecface2, 2447edc367800ba914acf7ddd5d250416b45fb31, 1b381a638e1851d8cfdfe08ed9cdbec5295b18c9, 31a7a0bbeb006bac2d9c81a2874825025214b6d8 |
| Linux/Linuxgeneric | 5.15 | Not reported |
Published upstream
Feb 14, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 16, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 16, 2026
In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: add bounds check for if_id in IRQ handler The IRQ handler extracts if_id from the upper 16 bits of the hardware status register and uses it to index into ethsw->ports[] without validation. Since if_id can be any 16-bit value (0-65535) but the ports array is only allocated with sw_attr.num_ifs elements, this can lead to an out-of-bounds read potentially. Add a bounds check before accessing the array, consistent with the existing validation in dpaa2_switch_rx().
Quoted source text, attributed separately from HOL analysis.