In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query
Fix a "scheduling while atomic" bug in mlx5e_ipsec_init_macs() by replacing mlx5_query_mac_address() with ether_addr_copy() to get the local MAC address directly from netdev->dev_addr.
The issue occurs because mlx5_query_mac_address() queries the hardware which involves mlx5_cmd_exec() that can sleep, but it is called from the mlx5e_ipsec_handle_event workqueue which runs in atomic context.
The MAC address is already available in netdev->dev_addr, so no need to query hardware. This avoids the sleeping call and resolves the bug.
Call trace: BUG: scheduling while atomic: kworker/u112:2/69344/0x00000200 __schedule+0x7ab/0xa20 schedule+0x1c/0xb0 schedule_timeout+0x6e/0xf0 __wait_for_common+0x91/0x1b0 cmd_exec+0xa85/0xff0 [mlx5_core] mlx5_cmd_exec+0x1f/0x50 [mlx5_core] mlx5_query_nic_vport_mac_address+0x7b/0xd0 [mlx5_core] mlx5_query_mac_address+0x19/0x30 [mlx5_core] mlx5e_ipsec_init_macs+0xc1/0x720 [mlx5_core] mlx5e_ipsec_build_accel_xfrm_attrs+0x422/0x670 [mlx5_core] mlx5e_ipsec_handle_event+0x2b9/0x460 [mlx5_core] process_one_work+0x178/0x2e0 worker_thread+0x2ea/0x430
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-develUpgrade kernel6.18Upgrade kernel6.18-tools-develUpgrade kernel6.18-debuginfoUpgrade kernel6.18-libbpf-staticUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-libbpfUpgrade kernel6.18-libbpf-debuginfoUpgrade kernel6.18-modules-extraUpgrade perf6.18-debuginfoUpgrade bpftool6.18-debuginfoUpgrade python3-perf6.18-debuginfoUpgrade kernel6.18-libbpf-develUpgrade bpftool6.18Upgrade kernel6.18-toolsUpgrade perf6.18Upgrade kernel-livepatch-6.18.16-18.222Upgrade python3-perf6.18Upgrade kernel6.18-headersUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-debuginfo-common-aarch64 | May 19, 2026 | May 6, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 6, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1057-oracleUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-gkeopUpgrade linux-image-6.8.1-1055-realtimeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-raspiUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1063-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1063-gcp-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1058-gke-64kUpgrade linux-image-azureUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-2049-raspi-realtimeUpgrade linux-image-6.8.0-134-generic-64kUpgrade linux-image-gkeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1060-aws-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-134-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1058-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1058-nvidia-lowlatencyUpgrade linux-image-6.8.0-1029-nvidia-tegraUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-intel-iotgUpgrade linux-image-aws-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1060-aws-fipsUpgrade linux-image-6.8.0-1058-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1063-gcp-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1060-raspiUpgrade linux-image-6.8.0-1060-ibmUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-134-genericUpgrade linux-image-6.8.0-134-fipsUpgrade linux-image-6.8.0-1062-azure-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-fips-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-virtualUpgrade linux-image-oem-22.04dUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1058-nvidiaUpgrade linux-image-gke-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-134-lowlatencyUpgrade linux-image-6.8.0-1057-oracle-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-1045-gkeopUpgrade linux-image-6.8.0-1029-nvidia-tegra-rtUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1060-awsUpgrade linux-image-6.8.0-1058-nvidia-lowlatency-64kUpgrade linux-image-xilinxUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-6.8 | Jul 2, 2026 | Jul 1, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub