In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix bridge mode operations when there are no VFs
Currently, trying to set the bridge mode attribute when numvfs=0 leads to a crash:
bridge link set dev eth2 hwmode vepa
[ 168.967392] BUG: kernel NULL pointer dereference, address: 0000000000000030 [...] [ 168.969989] RIP: 0010:mlx5_add_flow_rules+0x1f/0x300 [mlx5_core] [...] [ 168.976037] Call Trace: [ 168.976188] <TASK> [ 168.978620] _mlx5_eswitch_set_vepa_locked+0x113/0x230 [mlx5_core] [ 168.979074] mlx5_eswitch_set_vepa+0x7f/0xa0 [mlx5_core] [ 168.979471] rtnl_bridge_setlink+0xe9/0x1f0 [ 168.979714] rtnetlink_rcv_msg+0x159/0x400 [ 168.980451] netlink_rcv_skb+0x54/0x100 [ 168.980675] netlink_unicast+0x241/0x360 [ 168.980918] netlink_sendmsg+0x1f6/0x430 [ 168.981162] ____sys_sendmsg+0x3bb/0x3f0 [ 168.982155] ___sys_sendmsg+0x88/0xd0 [ 168.985036] __sys_sendmsg+0x59/0xa0 [ 168.985477] do_syscall_64+0x79/0x150 [ 168.987273] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 168.987773] RIP: 0033:0x7f8f7950f917
(esw->fdb_table.legacy.vepa_fdb is null)
The bridge mode is only relevant when there are multiple functions per port. Therefore, prevent setting and getting this setting when there are no VFs.
Note that after this change, there are no settings to change on the PF interface using `bridge link` when there are no VFs, so the interface no longer appears in the `bridge link` output.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.111-120.187Upgrade perf-debuginfoUpgrade perfUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-tools-debuginfo | Oct 16, 2025 | Sep 27, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Dec 12, 2024 | Sep 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools | Dec 12, 2024 | Sep 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 27, 2024 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-defaultUpgrade kernel-64kbUpgrade dtb-caviumUpgrade kernel-rtUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade cluster-md-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-lgUpgrade dtb-amazonUpgrade kernel-debug-vdsoUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade dtb-qcomUpgrade kernel-rt_debug-develUpgrade kernel-debugUpgrade kernel-rt-livepatchUpgrade dtb-hisiliconUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-azureUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade dtb-armUpgrade dtb-amlogicUpgrade kernel-default-livepatch-develUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rt | Dec 5, 2025 | Oct 10, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04 | Dec 13, 2024 | Sep 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Sep 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub