In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix vport QoS cleanup on error
When enabling vport QoS fails, the scheduling node was never freed, causing a leak.
Add the missing free and reset the vport scheduling node pointer to NULL.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel-uek | Mar 25, 2026 | Mar 27, 2025 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade kernel-default-baseUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-obs-qa | Dec 5, 2025 | Jun 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub