In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix bridge mode operations when there are no VFs
Currently, trying to set the bridge mode attribute when numvfs=0 leads to a crash:
bridge link set dev eth2 hwmode vepa
[ 168.967392] BUG: kernel NULL pointer dereference, address: 0000000000000030 [...] [ 168.969989] RIP: 0010:mlx5_add_flow_rules+0x1f/0x300 [mlx5_core] [...] [ 168.976037] Call Trace: [ 168.976188] <TASK> [ 168.978620] _mlx5_eswitch_set_vepa_locked+0x113/0x230 [mlx5_core] [ 168.979074] mlx5_eswitch_set_vepa+0x7f/0xa0 [mlx5_core] [ 168.979471] rtnl_bridge_setlink+0xe9/0x1f0 [ 168.979714] rtnetlink_rcv_msg+0x159/0x400 [ 168.980451] netlink_rcv_skb+0x54/0x100 [ 168.980675] netlink_unicast+0x241/0x360 [ 168.980918] netlink_sendmsg+0x1f6/0x430 [ 168.981162] ____sys_sendmsg+0x3bb/0x3f0 [ 168.982155] ___sys_sendmsg+0x88/0xd0 [ 168.985036] __sys_sendmsg+0x59/0xa0 [ 168.985477] do_syscall_64+0x79/0x150 [ 168.987273] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 168.987773] RIP: 0033:0x7f8f7950f917
(esw->fdb_table.legacy.vepa_fdb is null)
The bridge mode is only relevant when there are multiple functions per port. Therefore, prevent setting and getting this setting when there are no VFs.
Note that after this change, there are no settings to change on the PF interface using `bridge link` when there are no VFs, so the interface no longer appears in the `bridge link` output.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.111-120.187Upgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade bpftool | Oct 16, 2025 | Sep 27, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Dec 12, 2024 | Sep 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Dec 12, 2024 | Sep 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 27, 2024 |
| Suse | — | Upgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-64kbUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade dtb-lgUpgrade kernel-debugUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-hisiliconUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-freescaleUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade dtb-broadcomUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade kernel-rtUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade kernel-sourceUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade dtb-apmUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade dtb-nvidia | Dec 5, 2025 | Oct 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-50-lowlatency-64k | Dec 13, 2024 | Sep 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Sep 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub