In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix bridge mode operations when there are no VFs
Currently, trying to set the bridge mode attribute when numvfs=0 leads to a crash:
bridge link set dev eth2 hwmode vepa
[ 168.967392] BUG: kernel NULL pointer dereference, address: 0000000000000030 [...] [ 168.969989] RIP: 0010:mlx5_add_flow_rules+0x1f/0x300 [mlx5_core] [...] [ 168.976037] Call Trace: [ 168.976188] <TASK> [ 168.978620] _mlx5_eswitch_set_vepa_locked+0x113/0x230 [mlx5_core] [ 168.979074] mlx5_eswitch_set_vepa+0x7f/0xa0 [mlx5_core] [ 168.979471] rtnl_bridge_setlink+0xe9/0x1f0 [ 168.979714] rtnetlink_rcv_msg+0x159/0x400 [ 168.980451] netlink_rcv_skb+0x54/0x100 [ 168.980675] netlink_unicast+0x241/0x360 [ 168.980918] netlink_sendmsg+0x1f6/0x430 [ 168.981162] ____sys_sendmsg+0x3bb/0x3f0 [ 168.982155] ___sys_sendmsg+0x88/0xd0 [ 168.985036] __sys_sendmsg+0x59/0xa0 [ 168.985477] do_syscall_64+0x79/0x150 [ 168.987273] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 168.987773] RIP: 0033:0x7f8f7950f917
(esw->fdb_table.legacy.vepa_fdb is null)
The bridge mode is only relevant when there are multiple functions per port. Therefore, prevent setting and getting this setting when there are no VFs.
Note that after this change, there are no settings to change on the PF interface using `bridge link` when there are no VFs, so the interface no longer appears in the `bridge link` output.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-livepatch-6.1.111-120.187Upgrade kernel-tools-devel | Oct 16, 2025 | Sep 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Dec 12, 2024 | Sep 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Dec 12, 2024 | Sep 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 27, 2024 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade kernel-azure-develUpgrade dtb-apmUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade kernel-zfcpdumpUpgrade dtb-armUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade dtb-rockchipUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-azure-extraUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade dtb-marvellUpgrade dtb-appleUpgrade kernel-debug-develUpgrade kernel-macrosUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade dtb-freescaleUpgrade kernel-azureUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade dtb-alteraUpgrade cluster-md-kmp-rt | Dec 5, 2025 | Oct 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azureUpgrade linux-image-gke | Dec 13, 2024 | Sep 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Sep 27, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub