In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Don't call cleanup on profile rollback failure
When profile rollback fails in mlx5e_netdev_change_profile, the netdev profile var is left set to NULL. Avoid a crash when unloading the driver by not calling profile->cleanup in such a case.
This was encountered while testing, with the original trigger that the wq rescuer thread creation got interrupted (presumably due to Ctrl+C-ing modprobe), which gets converted to ENOMEM (-12) by mlx5e_priv_init, the profile rollback also fails for the same reason (signal still active) so the profile is left as NULL, leading to a crash later in _mlx5e_remove.
[ 732.473932] mlx5_core 0000:08:00.1: E-Switch: Unload vfs: mode(OFFLOADS), nvfs(2), necvfs(0), active vports(2) [ 734.525513] workqueue: Failed to create a rescuer kthread for wq "mlx5e": -EINTR [ 734.557372] mlx5_core 0000:08:00.1: mlx5e_netdev_init_profile:6235:(pid 6086): mlx5e_priv_init failed, err=-12 [ 734.559187] mlx5_core 0000:08:00.1 eth3: mlx5e_netdev_change_profile: new profile init failed, -12 [ 734.560153] workqueue: Failed to create a rescuer kthread for wq "mlx5e": -EINTR [ 734.589378] mlx5_core 0000:08:00.1: mlx5e_netdev_init_profile:6235:(pid 6086): mlx5e_priv_init failed, err=-12 [ 734.591136] mlx5_core 0000:08:00.1 eth3: mlx5e_netdev_change_profile: failed to rollback to orig profile, -12 [ 745.537492] BUG: kernel NULL pointer dereference, address: 0000000000000008 [ 745.538222] #PF: supervisor read access in kernel mode <snipped> [ 745.551290] Call Trace: [ 745.551590] <TASK> [ 745.551866] ? __die+0x20/0x60 [ 745.552218] ? page_fault_oops+0x150/0x400 [ 745.555307] ? exc_page_fault+0x79/0x240 [ 745.555729] ? asm_exc_page_fault+0x22/0x30 [ 745.556166] ? mlx5e_remove+0x6b/0xb0 [mlx5_core] [ 745.556698] auxiliary_bus_remove+0x18/0x30 [ 745.557134] device_release_driver_internal+0x1df/0x240 [ 745.557654] bus_remove_device+0xd7/0x140 [ 745.558075] device_del+0x15b/0x3c0 [ 745.558456] mlx5_rescan_drivers_locked.part.0+0xb1/0x2f0 [mlx5_core] [ 745.559112] mlx5_unregister_device+0x34/0x50 [mlx5_core] [ 745.559686] mlx5_uninit_one+0x46/0xf0 [mlx5_core] [ 745.560203] remove_one+0x4e/0xd0 [mlx5_core] [ 745.560694] pci_device_remove+0x39/0xa0 [ 745.561112] device_release_driver_internal+0x1df/0x240 [ 745.561631] driver_detach+0x47/0x90 [ 745.562022] bus_remove_driver+0x84/0x100 [ 745.562444] pci_unregister_driver+0x3b/0x90 [ 745.562890] mlx5_cleanup+0xc/0x1b [mlx5_core] [ 745.563415] __x64_sys_delete_module+0x14d/0x2f0 [ 745.563886] ? kmem_cache_free+0x1b0/0x460 [ 745.564313] ? lockdep_hardirqs_on_prepare+0xe2/0x190 [ 745.564825] do_syscall_64+0x6d/0x140 [ 745.565223] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 745.565725] RIP: 0033:0x7f1579b1288b
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.124-134.200Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade perfUpgrade python3-perfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo | Feb 17, 2025 | Nov 7, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Nov 7, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 7, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-ibmUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-azureUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fde-lts-24.04 | Feb 20, 2025 | Nov 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Nov 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub