In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv
mlx5e_priv is an unstable structure that can be memset(0) if profile attaching fails.
Pass netdev to mlx5e_destroy_netdev() to guarantee it will work on a valid netdev.
On mlx5e_remove: Check validity of priv->profile, before attempting to cleanup any resources that might be not there.
This fixes a kernel oops in mlx5e_remove when switchdev mode fails due to change profile failure.
$ devlink dev eswitch set pci/0000:00:03.0 mode switchdev Error: mlx5_core: Failed setting eswitch to offloads. dmesg: workqueue: Failed to create a rescuer kthread for wq "mlx5e": -EINTR mlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init failed, err=-12 mlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: new profile init failed, -12 workqueue: Failed to create a rescuer kthread for wq "mlx5e": -EINTR mlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init failed, err=-12 mlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: failed to rollback to orig profile, -12
$ devlink dev reload pci/0000:00:03.0 ==> oops
BUG: kernel NULL pointer dereference, address: 0000000000000370 PGD 0 P4D 0 Oops: Oops: 0000 [#1] SMP NOPTI CPU: 15 UID: 0 PID: 520 Comm: devlink Not tainted 6.18.0-rc5+ #115 PREEMPT(voluntary) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:mlx5e_dcbnl_dscp_app+0x23/0x100 RSP: 0018:ffffc9000083f8b8 EFLAGS: 00010286 RAX: ffff8881126fc380 RBX: ffff8881015ac400 RCX: ffffffff826ffc45 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881035109c0 RBP: ffff8881035109c0 R08: ffff888101e3e838 R09: ffff888100264e10 R10: ffffc9000083f898 R11: ffffc9000083f8a0 R12: ffff888101b921a0 R13: ffff888101b921a0 R14: ffff8881015ac9a0 R15: ffff8881015ac400 FS: 00007f789a3c8740(0000) GS:ffff88856aa59000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000370 CR3: 000000010b6c0001 CR4: 0000000000370ef0 Call Trace: <TASK> mlx5e_remove+0x57/0x110 device_release_driver_internal+0x19c/0x200 bus_remove_device+0xc6/0x130 device_del+0x160/0x3d0 ? devl_param_driverinit_value_get+0x2d/0x90 mlx5_detach_device+0x89/0xe0 mlx5_unload_one_devl_locked+0x3a/0x70 mlx5_devlink_reload_down+0xc8/0x220 devlink_reload+0x7d/0x260 devlink_nl_reload_doit+0x45b/0x5a0 genl_family_rcv_msg_doit+0xe8/0x140
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade perf6.12Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade bpftool6.12Upgrade kernel6.12-libbpf-staticUpgrade kernel6.12-libbpfUpgrade kernel6.12-modules-extraUpgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftool6.12-debuginfoUpgrade kernel-livepatch-6.12.68-92.122Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-develUpgrade kernel6.12-headersUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-toolsUpgrade kernel6.12Upgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64 | Mar 9, 2026 | Jan 31, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 12, 2026 | Jan 31, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jan 31, 2026 |
| Ubuntu | — | Upgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-aws-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-6.8.0-117-genericUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-6.17Upgrade linux-image-genericUpgrade linux-image-6.17.0-1030-oemUpgrade linux-image-6.17.0-1021-gcp-64kUpgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-116-fipsUpgrade linux-image-raspiUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.17Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-6.17.0-1021-gcpUpgrade linux-image-6.17.0-1031-nvidia-64kUpgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-fipsUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-6.17.0-1019-oracleUpgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1055-awsUpgrade linux-image-6.8.0-1059-azureUpgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-raspi-realtimeUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-6.8.0-1056-azureUpgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-6.17.0-1019-oracle-64kUpgrade linux-image-xilinxUpgrade linux-image-nvidia-64k-6.17Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-6.17Upgrade linux-image-nvidia-tegraUpgrade linux-image-virtualUpgrade linux-image-fips-6.8Upgrade linux-image-azure-6.17Upgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-6.17.0-1021-azureUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-azure-fde-6.17Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-gcp-6.17Upgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-realtime-6.17Upgrade linux-image-oem-24.04dUpgrade linux-image-6.17.0-1018-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04 | May 25, 2026 | May 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub