In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix race between DIM disable and net_dim()
There's a race between disabling DIM and NAPI callbacks using the dim pointer on the RQ or SQ.
If NAPI checks the DIM state bit and sees it still set, it assumes `rq->dim` or `sq->dim` is valid. But if DIM gets disabled right after that check, the pointer might already be set to NULL, leading to a NULL pointer dereference in net_dim().
Fix this by calling `synchronize_net()` before freeing the DIM context. This ensures all in-progress NAPI callbacks are finished before the pointer is cleared.
Kernel log:
BUG: kernel NULL pointer dereference, address: 0000000000000000 ... RIP: 0010:net_dim+0x23/0x190 ... Call Trace: <TASK> ? __die+0x20/0x60 ? page_fault_oops+0x150/0x3e0 ? common_interrupt+0xf/0xa0 ? sysvec_call_function_single+0xb/0x90 ? exc_page_fault+0x74/0x130 ? asm_exc_page_fault+0x22/0x30 ? net_dim+0x23/0x190 ? mlx5e_poll_ico_cq+0x41/0x6f0 [mlx5_core] ? sysvec_apic_timer_interrupt+0xb/0x90 mlx5e_handle_rx_dim+0x92/0xd0 [mlx5_core] mlx5e_napi_poll+0x2cd/0xac0 [mlx5_core] ? mlx5e_poll_ico_cq+0xe5/0x6f0 [mlx5_core] busy_poll_stop+0xa2/0x200 ? mlx5e_napi_poll+0x1d9/0xac0 [mlx5_core] ? mlx5e_trigger_irq+0x130/0x130 [mlx5_core] __napi_busy_loop+0x345/0x3b0 ? sysvec_call_function_single+0xb/0x90 ? asm_sysvec_call_function_single+0x16/0x20 ? sysvec_apic_timer_interrupt+0xb/0x90 ? pcpu_free_area+0x1e4/0x2e0 napi_busy_loop+0x11/0x20 xsk_recvmsg+0x10c/0x130 sock_recvmsg+0x44/0x70 __sys_recvfrom+0xbc/0x130 ? __schedule+0x398/0x890 __x64_sys_recvfrom+0x20/0x30 do_syscall_64+0x4c/0x100 entry_SYSCALL_64_after_hwframe+0x4b/0x53 ... ---[ end trace 0000000000000000 ]--- ... ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfoUpgrade bpftool6.12Upgrade kernel6.12-libbpf-develUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-modules-extra-commonUpgrade perf6.12Upgrade kernel6.12-headersUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-tools-debuginfoUpgrade kernel-livepatch-6.12.40-63.114Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade perf6.12-debuginfoUpgrade kernel6.12Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-toolsUpgrade python3-perf6.12Upgrade kernel6.12-devel | Sep 16, 2025 | Jul 25, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 31, 2025 | Jul 25, 2025 |
| Suse | — | Upgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade dtb-appleUpgrade kernel-azureUpgrade dtb-socionextUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade dtb-marvellUpgrade dtb-amdUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade kselftests-kmp-rtUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade dtb-apmUpgrade cluster-md-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-armUpgrade kernel-obs-buildUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade kernel-rtUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade dtb-mediatek | Dec 5, 2025 | Sep 22, 2025 |
| Ubuntu | — | Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-oem-6.14Upgrade linux-image-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-oracleUpgrade linux-image-aws-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-azure-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-virtual-6.14Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-awsUpgrade linux-image-raspi-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-36-generic-64k | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub