In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: fw_tracer, return NULL on create error
Tracer creation can fail by returning either NULL or ERR_PTR. The return value is stored without a check on the device, and users treat ERR_PTR and NULL the same way. This also causes a crash in the core dump logic, which is missing the ERR_PTR check and ends up dereferencing it, as shown in the trace below.
Switch tracer creation to return NULL on failure only, so callers only need a single NULL check.
Internal error: Oops: 0000000096000006 [#1] SMP Modules linked in: mlx5_ib ib_uverbs ib_core ipv6 mlx5_core CPU: 1 UID: 0 PID: 12 Comm: kworker/u16:0 Not tainted 6.19.7 #1 PREEMPT(none) Workqueue: mlx5_health0001:01:00.0 mlx5_fw_reporter_err_work [mlx5_core] pstate: a3400009 (NzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : mlx5_fw_tracer_trigger_core_dump_general+0x58/0xe0 [mlx5_core] lr : mlx5_fw_tracer_trigger_core_dump_general+0x40/0xe0 [mlx5_core] sp : ffff800081cf3c40 x29: ffff800081cf3c90 x28: 0000000000000000 x27: 0000000000000000 x26: ffff000080018828 x25: 0000000000000000 x24: ffff000080304a05 x23: ffff800081cf3d80 x22: ffff0000847e01a0 x21: 0000000000000000 x20: ffff0000847e01a0 x19: ffffffffffffffa1 x18: ffff80008310bbf0 x17: ffff800080119650 x16: ffff80008010df54 x15: ffff80008010d4ac x14: ffff800079c202e4 x13: ffff80008002fe60 x12: ffff800080119650 x11: ffff80008010df54 x10: ffff80008010d4ac x9 : ffff800079c203d8 x8 : ffff800081cf3c88 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000030 x2 : 0000000000000008 x1 : 0000000000000000 x0 : 00000000c5c4000e Call trace: mlx5_fw_tracer_trigger_core_dump_general+0x58/0xe0 [mlx5_core] (P) mlx5_fw_reporter_dump+0x30/0x2e0 [mlx5_core] devlink_health_do_dump+0x9c/0x160 devlink_health_report+0x1c0/0x288 mlx5_fw_reporter_err_work+0xac/0xc0 [mlx5_core] process_one_work+0x15c/0x3d8 worker_thread+0x18c/0x320 kthread+0x148/0x228 ret_from_fork+0x10/0x20 Code: b9400000 5ac00800 7a401800 540003ca (3940a260) ---[ end trace 0000000000000000 ]--- Kernel panic - not syncing: Oops: Fatal exception SMP: stopping secondary CPUs Kernel Offset: disabled CPU features: 0x000000,00078031,75fce5a1,35fffe67 Memory Limit: none ---[ end Kernel panic - not syncing: Oops: Fatal exception ]---
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-modules-extra-commonUpgrade kernel-livepatch-6.18.48-107.148Upgrade perf6.18-debuginfoUpgrade bpftool6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-debuginfoUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-tools-develUpgrade bpftool6.18-debuginfoUpgrade python3-perf6.18Upgrade microvm-kernel6.18Upgrade perf6.18Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-headersUpgrade kernel6.18-modules-extraUpgrade kernel6.18-develUpgrade kernel6.18-toolsUpgrade python3-perf6.18-debuginfoUpgrade kernel6.18 | Sep 30, 2026 | Aug 22, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Aug 26, 2026 | Aug 26, 2026 |
| Redhat_linux | — | No solution exists | Aug 26, 2026 | Aug 22, 2026 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1109-intel-iot-realtimeUpgrade linux-image-awsUpgrade linux-image-5.15.0-1118-gcpUpgrade linux-image-generic-64k-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1117-aws-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-azure-fde-5.15Upgrade linux-image-azureUpgrade linux-image-5.15.0-1100-gkeopUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-198-generic-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-195-lowlatency-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1123-azure-fipsUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1112-intel-iotgUpgrade linux-image-virtual-5.15Upgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1117-awsUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-198-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1109-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1111-ibmUpgrade linux-image-5.15.0-195-lowlatencyUpgrade linux-image-5.15.0-1114-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1080-xilinx-zynqmpUpgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-aws-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1123-azureUpgrade linux-image-5.15.0-1116-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1117-aws-64kUpgrade linux-image-intelUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1122-azure-fdeUpgrade linux-image-genericUpgrade linux-image-5.15.0-198-genericUpgrade linux-image-5.15.0-198-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1118-gcp-fipsUpgrade linux-image-5.15.0-1113-gke | Oct 6, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 22, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub