In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix ECVF vports unload on shutdown flow
Fix shutdown flow UAF when a virtual function is created on the embedded chip (ECVF) of a BlueField device. In such case the vport acl ingress table is not properly destroyed.
ECVF functionality is independent of ecpf_vport_exists capability and thus functions mlx5_eswitch_(enable|disable)_pf_vf_vports() should not test it when enabling/disabling ECVF vports.
kernel log: [] refcount_t: underflow; use-after-free. [] WARNING: CPU: 3 PID: 1 at lib/refcount.c:28 refcount_warn_saturate+0x124/0x220 ---------------- [] Call trace: [] refcount_warn_saturate+0x124/0x220 [] tree_put_node+0x164/0x1e0 [mlx5_core] [] mlx5_destroy_flow_table+0x98/0x2c0 [mlx5_core] [] esw_acl_ingress_table_destroy+0x28/0x40 [mlx5_core] [] esw_acl_ingress_lgcy_cleanup+0x80/0xf4 [mlx5_core] [] esw_legacy_vport_acl_cleanup+0x44/0x60 [mlx5_core] [] esw_vport_cleanup+0x64/0x90 [mlx5_core] [] mlx5_esw_vport_disable+0xc0/0x1d0 [mlx5_core] [] mlx5_eswitch_unload_ec_vf_vports+0xcc/0x150 [mlx5_core] [] mlx5_eswitch_disable_sriov+0x198/0x2a0 [mlx5_core] [] mlx5_device_disable_sriov+0xb8/0x1e0 [mlx5_core] [] mlx5_sriov_detach+0x40/0x50 [mlx5_core] [] mlx5_unload+0x40/0xc4 [mlx5_core] [] mlx5_unload_one_devl_locked+0x6c/0xe4 [mlx5_core] [] mlx5_unload_one+0x3c/0x60 [mlx5_core] [] shutdown+0x7c/0xa4 [mlx5_core] [] pci_device_shutdown+0x3c/0xa0 [] device_shutdown+0x170/0x340 [] __do_sys_reboot+0x1f4/0x2a0 [] __arm64_sys_reboot+0x2c/0x40 [] invoke_syscall+0x78/0x100 [] el0_svc_common.constprop.0+0x54/0x184 [] do_el0_svc+0x30/0xac [] el0_svc+0x48/0x160 [] el0t_64_sync_handler+0xa4/0x12c [] el0t_64_sync+0x1a4/0x1a8 [] --[ end trace 9c4601d68c70030e ]---
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64kUpgrade kernel-rt-64k-debug-coreUpgrade kernelUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-modulesUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade rvUpgrade kernel-debug-devel-matchedUpgrade kernel-64kUpgrade kernel-64k-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-uki-virt-addonsUpgrade python3-perfUpgrade perfUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debugUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-64k-develUpgrade kernel-64k-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-debug-uki-virtUpgrade libperfUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-64k-coreUpgrade kernel-docUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-debug-modulesUpgrade rtlaUpgrade kernel-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-rt-devel | Apr 16, 2026 | Apr 6, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-perf6.12Upgrade kernel-tools-debuginfoUpgrade kernel6.12Upgrade bpftoolUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel-libbpf-develUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-debuginfoUpgrade perf6.12Upgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-headers | Sep 9, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 22, 2026 | Jul 3, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 9, 2025 | Jul 3, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-matchedUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade rvUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade libperfUpgrade libperf-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virtUpgrade kernelUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-zfcpdump-debuginfo | Apr 14, 2026 | Apr 12, 2026 |
| Suse | — | Upgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-apmUpgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade kernel-syms-azureUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade kernel-devel-rtUpgrade dtb-qcomUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade kernel-azure-optionalUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-rockchipUpgrade kernel-rt_debugUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade kernel-develUpgrade kernel-docs-htmlUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade dtb-socionext | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-xilinxUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-ibm-6.8Upgrade linux-image-kvmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-fipsUpgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-aws-64kUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gcpUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-realtime-6.14Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibmUpgrade linux-image-aws-64k-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oem-24.04cUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-generic-6.14Upgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1051-azure | Jul 7, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub