{"id":"CVE-2026-22982","revision":"c35c8246aeb74601a51696fc9a6a2f98","records":[{"revision":"c35c8246aeb74601a51696fc9a6a2f98","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-22982","aliases":[],"title":"net: mscc: ocelot: Fix crash when adding interface under a lag","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mscc: ocelot: Fix crash when adding interface under a lag\n\nCommit 15faa1f67ab4 (\"lan966x: Fix crash when adding interface under a lag\")\nfixed a similar issue in the lan966x driver caused by a NULL pointer dereference.\nThe ocelot_set_aggr_pgids() function in the ocelot driver has similar logic\nand is susceptible to the same crash.\n\nThis issue specifically affects the ocelot_vsc7514.c frontend, which leaves\nunused ports as NULL pointers. The felix_vsc9959.c frontend is unaffected as\nit uses the DSA framework which registers all ports.\n\nFix this by checking if the port pointer is valid before accessing it.","state":0,"publishedAt":"2026-01-23T15:24:04.556+00:00","modifiedAt":"2026-10-15T01:12:28.072+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/ethernet/mscc/ocelot.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"528d3f190c98c8f7d9581f68db4af021696727b2\",\n                            \"lessThan\": \"8767f238b0e6c3d0b295ac6dce9fbe6a99bd1b9d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"528d3f190c98c8f7d9581f68db4af021696727b2\",\n                            \"lessThan\": \"b17818307446c5a8d925a39a792261dbfa930041\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"528d3f190c98c8f7d9581f68db4af021696727b2\",\n                            \"lessThan\": \"2985712dc76dfa670eb7fd607c09d4d48e5f5c6e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"528d3f190c98c8f7d9581f68db4af021696727b2\",\n                            \"lessThan\": \"03fb1708b7d1e76aecebf767ad059c319845039f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"528d3f190c98c8f7d9581f68db4af021696727b2\",\n                            \"lessThan\": \"f490af47bbee02441e356a1e0b86e3b3dd5120ff\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"528d3f190c98c8f7d9581f68db4af021696727b2\",\n                            \"lessThan\": \"34f3ff52cb9fa7dbf04f5c734fcc4cb6ed5d1a95\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/ethernet/mscc/ocelot.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.12\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.12\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.198\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.161\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.121\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.66\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.6\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.19\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/8767f238b0e6c3d0b295ac6dce9fbe6a99bd1b9d","https://git.kernel.org/stable/c/b17818307446c5a8d925a39a792261dbfa930041","https://git.kernel.org/stable/c/2985712dc76dfa670eb7fd607c09d4d48e5f5c6e","https://git.kernel.org/stable/c/03fb1708b7d1e76aecebf767ad059c319845039f","https://git.kernel.org/stable/c/f490af47bbee02441e356a1e0b86e3b3dd5120ff","https://git.kernel.org/stable/c/34f3ff52cb9fa7dbf04f5c734fcc4cb6ed5d1a95"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-22982","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-22982","identifiers":["CVE-2026-22982"]},"retained":false,"historicalAffected":[]}],"coverage":[]}