In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix ECVF vports unload on shutdown flow
Fix shutdown flow UAF when a virtual function is created on the embedded chip (ECVF) of a BlueField device. In such case the vport acl ingress table is not properly destroyed.
ECVF functionality is independent of ecpf_vport_exists capability and thus functions mlx5_eswitch_(enable|disable)_pf_vf_vports() should not test it when enabling/disabling ECVF vports.
kernel log: [] refcount_t: underflow; use-after-free. [] WARNING: CPU: 3 PID: 1 at lib/refcount.c:28 refcount_warn_saturate+0x124/0x220 ---------------- [] Call trace: [] refcount_warn_saturate+0x124/0x220 [] tree_put_node+0x164/0x1e0 [mlx5_core] [] mlx5_destroy_flow_table+0x98/0x2c0 [mlx5_core] [] esw_acl_ingress_table_destroy+0x28/0x40 [mlx5_core] [] esw_acl_ingress_lgcy_cleanup+0x80/0xf4 [mlx5_core] [] esw_legacy_vport_acl_cleanup+0x44/0x60 [mlx5_core] [] esw_vport_cleanup+0x64/0x90 [mlx5_core] [] mlx5_esw_vport_disable+0xc0/0x1d0 [mlx5_core] [] mlx5_eswitch_unload_ec_vf_vports+0xcc/0x150 [mlx5_core] [] mlx5_eswitch_disable_sriov+0x198/0x2a0 [mlx5_core] [] mlx5_device_disable_sriov+0xb8/0x1e0 [mlx5_core] [] mlx5_sriov_detach+0x40/0x50 [mlx5_core] [] mlx5_unload+0x40/0xc4 [mlx5_core] [] mlx5_unload_one_devl_locked+0x6c/0xe4 [mlx5_core] [] mlx5_unload_one+0x3c/0x60 [mlx5_core] [] shutdown+0x7c/0xa4 [mlx5_core] [] pci_device_shutdown+0x3c/0xa0 [] device_shutdown+0x170/0x340 [] __do_sys_reboot+0x1f4/0x2a0 [] __arm64_sys_reboot+0x2c/0x40 [] invoke_syscall+0x78/0x100 [] el0_svc_common.constprop.0+0x54/0x184 [] do_el0_svc+0x30/0xac [] el0_svc+0x48/0x160 [] el0t_64_sync_handler+0xa4/0x12c [] el0t_64_sync+0x1a4/0x1a8 [] --[ end trace 9c4601d68c70030e ]---
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-headersUpgrade kernel-modules-coreUpgrade kernel-64k-coreUpgrade kernel-docUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debugUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade libperfUpgrade rtlaUpgrade kernel-rt-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-develUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-develUpgrade kernel-develUpgrade kernel-64kUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-64kUpgrade kernel-debug-devel-matchedUpgrade kernel-rtUpgrade python3-perfUpgrade kernel-64k-debugUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-rt-64k-modules-extraUpgrade rvUpgrade kernelUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rt-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-debug-core | Apr 16, 2026 | Apr 6, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.12.35-55.103Upgrade perf6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64 | Sep 9, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 22, 2026 | Jul 3, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Jul 3, 2025 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-debuginfoUpgrade perfUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfoUpgrade rvUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade libperf-debuginfoUpgrade libperfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virtUpgrade kernel-toolsUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-modules-coreUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-extra | Apr 14, 2026 | Apr 12, 2026 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade kernel-devel-rtUpgrade dtb-marvellUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade kernel-kvmsmall-vdsoUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade kernel-sourceUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade dtb-appleUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade dtb-caviumUpgrade kernel-docsUpgrade kernel-azure-optionalUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade kernel-rt-extraUpgrade dtb-rockchipUpgrade dtb-hisilicon | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gkeopUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-raspi-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-realtime-6.14Upgrade linux-image-nvidiaUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-gcpUpgrade linux-image-gcp-6.14Upgrade linux-image-gke-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-ibm-classicUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-gke-64kUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04aUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-genericUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-oracle-6.14Upgrade linux-image-oracleUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-aws-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-virtualUpgrade linux-image-xilinxUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gcp-6.8 | Jul 7, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub