CVE-2026-23180 dpaa2-switch: add bounds check for if_id in IRQ handler
An out-of-bounds read in the dpaa2-switch IRQ handler allows attackers to potentially disclose memory or cause a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-23180?
CVE-2026-23180 is a high-severity memory corruption vulnerability in Linux, published on 14 Feb 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
dpaa2-switch: add bounds check for if_id in IRQ handler
The IRQ handler extracts if_id from the upper 16 bits of the hardware status register and uses it to index into ethsw->ports[] without validation. Since if_id can be any 16-bit value (0-65535) but the ports array is only allocated with sw_attr.num_ifs elements, this can lead to an out-of-bounds read potentially.
Add a bounds check before accessing the array, consistent with the existing validation in dpaa2_switch_rx().
Weakness: CWE-125
Which versions are affected by CVE-2026-23180?
How do I fix CVE-2026-23180?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-23180 being exploited?
There is no known exploitation of CVE-2026-23180 in the wild and no public exploit code.
Sources
Also known as AZL-77664, BELL-CVE-2026-23180, DEBIAN-CVE-2026-23180, GHSA-pmxm-x3p3-w327, ROOT-OS-DEBIAN-12-CVE-2026-23180, ROOT-OS-DEBIAN-13-CVE-2026-23180 and 3 more.