In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv
mlx5e_priv is an unstable structure that can be memset(0) if profile attaching fails, mlx5e_priv in mlx5e_dev devlink private is used to reference the netdev and mdev associated with that struct. Instead, store netdev directly into mlx5e_dev and get mdev from the containing mlx5_adev aux device structure.
This fixes a kernel oops in mlx5e_remove when switchdev mode fails due to change profile failure.
$ devlink dev eswitch set pci/0000:00:03.0 mode switchdev Error: mlx5_core: Failed setting eswitch to offloads. dmesg: workqueue: Failed to create a rescuer kthread for wq "mlx5e": -EINTR mlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init failed, err=-12 mlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: new profile init failed, -12 workqueue: Failed to create a rescuer kthread for wq "mlx5e": -EINTR mlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init failed, err=-12 mlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: failed to rollback to orig profile, -12
$ devlink dev reload pci/0000:00:03.0 ==> oops
BUG: kernel NULL pointer dereference, address: 0000000000000520 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: Oops: 0000 [#1] SMP NOPTI CPU: 3 UID: 0 PID: 521 Comm: devlink Not tainted 6.18.0-rc5+ #117 PREEMPT(voluntary) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:mlx5e_remove+0x68/0x130 RSP: 0018:ffffc900034838f0 EFLAGS: 00010246 RAX: ffff88810283c380 RBX: ffff888101874400 RCX: ffffffff826ffc45 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffff888102d789c0 R08: ffff8881007137f0 R09: ffff888100264e10 R10: ffffc90003483898 R11: ffffc900034838a0 R12: ffff888100d261a0 R13: ffff888100d261a0 R14: ffff8881018749a0 R15: ffff888101874400 FS: 00007f8565fea740(0000) GS:ffff88856a759000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000520 CR3: 000000010b11a004 CR4: 0000000000370ef0 Call Trace: <TASK> device_release_driver_internal+0x19c/0x200 bus_remove_device+0xc6/0x130 device_del+0x160/0x3d0 ? devl_param_driverinit_value_get+0x2d/0x90 mlx5_detach_device+0x89/0xe0 mlx5_unload_one_devl_locked+0x3a/0x70 mlx5_devlink_reload_down+0xc8/0x220 devlink_reload+0x7d/0x260 devlink_nl_reload_doit+0x45b/0x5a0 genl_family_rcv_msg_doit+0xe8/0x140
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-libbpfUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.12.68-92.122Upgrade python3-perf6.12-debuginfoUpgrade perf6.12Upgrade kernel6.12-libbpf-staticUpgrade kernel6.12-libbpf-develUpgrade python3-perf6.12Upgrade kernel6.12-toolsUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-modules-extra-commonUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.12Upgrade kernel6.12-headersUpgrade kernel6.12-devel | Mar 9, 2026 | Jan 25, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 12, 2026 | Jan 25, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jan 25, 2026 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade dtb-appleUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kselftests-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-defaultUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade kselftests-kmp-azureUpgrade dtb-amdUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade kernel-symsUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-rt-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade dtb-armUpgrade dtb-lgUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-source-azure | Feb 12, 2026 | Feb 12, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-ibm-classicUpgrade linux-image-gkeop-6.8Upgrade linux-image-gkeopUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1055-awsUpgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-6.8.0-117-genericUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-xilinxUpgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-6.8.0-116-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-azure-6.17Upgrade linux-image-genericUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatencyUpgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-fips-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.17.0-1030-oemUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-6.17.0-1019-oracle-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.17.0-1021-azureUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-raspiUpgrade linux-image-fipsUpgrade linux-image-ibmUpgrade linux-image-ibm-6.8Upgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-oracle-6.17Upgrade linux-image-6.17.0-1018-realtimeUpgrade linux-image-6.8.0-1059-azureUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-oem-24.04dUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64k-6.17Upgrade linux-image-nvidia-6.17Upgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-6.17.0-1031-nvidia-64kUpgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1056-azureUpgrade linux-image-6.17.0-1021-gcp-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-oem-6.17Upgrade linux-image-raspi-6.8Upgrade linux-image-kvmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-6.17.0-1021-gcpUpgrade linux-image-6.17.0-1019-oracleUpgrade linux-image-oracleUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-gkeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-azure-fde-6.17Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-realtime-6.17Upgrade linux-image-virtualUpgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-6.17 | May 25, 2026 | May 19, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Jan 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub