CVE-2026-31646
CVE-2026-31646 affects the Linux kernel LAN966X driver. The root cause is improper handling of the return value from page_pool_create(): on failure it can yield an ERR_PTR that is unconditionally passed through xdp_rxq_info_reg_mem_model() into page_pool_use_xdp_mem(), where it is dereferenced, c...