In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix bridge mode operations when there are no VFs
Currently, trying to set the bridge mode attribute when numvfs=0 leads to a crash:
bridge link set dev eth2 hwmode vepa
[ 168.967392] BUG: kernel NULL pointer dereference, address: 0000000000000030 [...] [ 168.969989] RIP: 0010:mlx5_add_flow_rules+0x1f/0x300 [mlx5_core] [...] [ 168.976037] Call Trace: [ 168.976188] <TASK> [ 168.978620] _mlx5_eswitch_set_vepa_locked+0x113/0x230 [mlx5_core] [ 168.979074] mlx5_eswitch_set_vepa+0x7f/0xa0 [mlx5_core] [ 168.979471] rtnl_bridge_setlink+0xe9/0x1f0 [ 168.979714] rtnetlink_rcv_msg+0x159/0x400 [ 168.980451] netlink_rcv_skb+0x54/0x100 [ 168.980675] netlink_unicast+0x241/0x360 [ 168.980918] netlink_sendmsg+0x1f6/0x430 [ 168.981162] ____sys_sendmsg+0x3bb/0x3f0 [ 168.982155] ___sys_sendmsg+0x88/0xd0 [ 168.985036] __sys_sendmsg+0x59/0xa0 [ 168.985477] do_syscall_64+0x79/0x150 [ 168.987273] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 168.987773] RIP: 0033:0x7f8f7950f917
(esw->fdb_table.legacy.vepa_fdb is null)
The bridge mode is only relevant when there are multiple functions per port. Therefore, prevent setting and getting this setting when there are no VFs.
Note that after this change, there are no settings to change on the PF interface using `bridge link` when there are no VFs, so the interface no longer appears in the `bridge link` output.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.111-120.187Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade perfUpgrade kernel-headers | Oct 16, 2025 | Sep 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Dec 12, 2024 | Sep 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Dec 12, 2024 | Sep 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 27, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade kernel-rt-vdsoUpgrade kernel-default-extraUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-azure-livepatch-develUpgrade dtb-amdUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade dtb-appleUpgrade kernel-debug-develUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade kernel-debugUpgrade kernel-64kbUpgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade kernel-64kb-develUpgrade dtb-exynos | Dec 5, 2025 | Oct 10, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-nvidia-64k | Dec 13, 2024 | Sep 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Sep 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub