In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix ECVF vports unload on shutdown flow
Fix shutdown flow UAF when a virtual function is created on the embedded chip (ECVF) of a BlueField device. In such case the vport acl ingress table is not properly destroyed.
ECVF functionality is independent of ecpf_vport_exists capability and thus functions mlx5_eswitch_(enable|disable)_pf_vf_vports() should not test it when enabling/disabling ECVF vports.
kernel log: [] refcount_t: underflow; use-after-free. [] WARNING: CPU: 3 PID: 1 at lib/refcount.c:28 refcount_warn_saturate+0x124/0x220 ---------------- [] Call trace: [] refcount_warn_saturate+0x124/0x220 [] tree_put_node+0x164/0x1e0 [mlx5_core] [] mlx5_destroy_flow_table+0x98/0x2c0 [mlx5_core] [] esw_acl_ingress_table_destroy+0x28/0x40 [mlx5_core] [] esw_acl_ingress_lgcy_cleanup+0x80/0xf4 [mlx5_core] [] esw_legacy_vport_acl_cleanup+0x44/0x60 [mlx5_core] [] esw_vport_cleanup+0x64/0x90 [mlx5_core] [] mlx5_esw_vport_disable+0xc0/0x1d0 [mlx5_core] [] mlx5_eswitch_unload_ec_vf_vports+0xcc/0x150 [mlx5_core] [] mlx5_eswitch_disable_sriov+0x198/0x2a0 [mlx5_core] [] mlx5_device_disable_sriov+0xb8/0x1e0 [mlx5_core] [] mlx5_sriov_detach+0x40/0x50 [mlx5_core] [] mlx5_unload+0x40/0xc4 [mlx5_core] [] mlx5_unload_one_devl_locked+0x6c/0xe4 [mlx5_core] [] mlx5_unload_one+0x3c/0x60 [mlx5_core] [] shutdown+0x7c/0xa4 [mlx5_core] [] pci_device_shutdown+0x3c/0xa0 [] device_shutdown+0x170/0x340 [] __do_sys_reboot+0x1f4/0x2a0 [] __arm64_sys_reboot+0x2c/0x40 [] invoke_syscall+0x78/0x100 [] el0_svc_common.constprop.0+0x54/0x184 [] do_el0_svc+0x30/0xac [] el0_svc+0x48/0x160 [] el0t_64_sync_handler+0xa4/0x12c [] el0t_64_sync+0x1a4/0x1a8 [] --[ end trace 9c4601d68c70030e ]---
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-modules-extraUpgrade kernel-64k-coreUpgrade kernel-rt-64k-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade rtlaUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-64k-develUpgrade libperfUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-debug-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-cross-headersUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64kUpgrade kernel-64kUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-debugUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modulesUpgrade perfUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade rvUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-uki-virt-addonsUpgrade kernelUpgrade kernel-devel-matched | Apr 16, 2026 | Apr 6, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade python3-perf6.12Upgrade kernel6.12Upgrade bpftoolUpgrade kernel-libbpfUpgrade perf6.12-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-headersUpgrade perf6.12Upgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel-tools | Sep 9, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 22, 2026 | Jul 3, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Rocky_linux | — | Upgrade kernel-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade libperf-debuginfoUpgrade kernel-toolsUpgrade kernel-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-debuginfo-common-s390xUpgrade libperfUpgrade rvUpgrade kernel-devel-matchedUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade rtlaUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-zfcpdump-devel | Apr 14, 2026 | Apr 12, 2026 |
| Suse | — | Upgrade dtb-amdUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-rt-vdsoUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade dtb-appleUpgrade dtb-sprdUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-source-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-hisiliconUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade kernel-rt-optionalUpgrade kernel-zfcpdumpUpgrade kernel-devel-rtUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade kernel-default-vdsoUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade dtb-armUpgrade kernel-rtUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kselftests-kmp-defaultUpgrade kernel-sourceUpgrade kernel-rt_debug-vdso | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-ibm-6.8Upgrade linux-image-xilinxUpgrade linux-image-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-oracle-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-oracleUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-azure-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-realtime-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-aws-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-virtual-6.14Upgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-fipsUpgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-gke-64kUpgrade linux-image-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-6.14Upgrade linux-image-realtime-hwe-24.04 | Jul 7, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub