In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix bridge mode operations when there are no VFs
Currently, trying to set the bridge mode attribute when numvfs=0 leads to a crash:
bridge link set dev eth2 hwmode vepa
[ 168.967392] BUG: kernel NULL pointer dereference, address: 0000000000000030 [...] [ 168.969989] RIP: 0010:mlx5_add_flow_rules+0x1f/0x300 [mlx5_core] [...] [ 168.976037] Call Trace: [ 168.976188] <TASK> [ 168.978620] _mlx5_eswitch_set_vepa_locked+0x113/0x230 [mlx5_core] [ 168.979074] mlx5_eswitch_set_vepa+0x7f/0xa0 [mlx5_core] [ 168.979471] rtnl_bridge_setlink+0xe9/0x1f0 [ 168.979714] rtnetlink_rcv_msg+0x159/0x400 [ 168.980451] netlink_rcv_skb+0x54/0x100 [ 168.980675] netlink_unicast+0x241/0x360 [ 168.980918] netlink_sendmsg+0x1f6/0x430 [ 168.981162] ____sys_sendmsg+0x3bb/0x3f0 [ 168.982155] ___sys_sendmsg+0x88/0xd0 [ 168.985036] __sys_sendmsg+0x59/0xa0 [ 168.985477] do_syscall_64+0x79/0x150 [ 168.987273] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 168.987773] RIP: 0033:0x7f8f7950f917
(esw->fdb_table.legacy.vepa_fdb is null)
The bridge mode is only relevant when there are multiple functions per port. Therefore, prevent setting and getting this setting when there are no VFs.
Note that after this change, there are no settings to change on the PF interface using `bridge link` when there are no VFs, so the interface no longer appears in the `bridge link` output.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.111-120.187 | Oct 16, 2025 | Sep 27, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Dec 12, 2024 | Sep 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Dec 12, 2024 | Sep 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 27, 2024 |
| Suse | — | Upgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade kernel-rtUpgrade dtb-broadcomUpgrade kernel-debugUpgrade kernel-azureUpgrade kernel-syms-azureUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-source-vanillaUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-freescaleUpgrade kernel-default-vdsoUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade dtb-apmUpgrade dtb-rockchipUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade dtb-appleUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade dtb-armUpgrade dtb-amdUpgrade kernel-kvmsmallUpgrade kernel-default-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade kernel-azure-vdso | Dec 5, 2025 | Oct 10, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64k | Dec 13, 2024 | Sep 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Sep 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub