In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix switchdev mode rollback in case of failure
If for some internal reason switchdev mode fails, we rollback to legacy mode, before this patch, rollback will unregister the uplink netdev and leave it unregistered causing the below kernel bug.
To fix this, we need to avoid netdev unregister by setting the proper rollback flag 'MLX5_PRIV_FLAGS_SWITCH_LEGACY' to indicate legacy mode.
devlink (431) used greatest stack depth: 11048 bytes left mlx5_core 0000:00:03.0: E-Switch: Disable: mode(LEGACY), nvfs(0), \ necvfs(0), active vports(0) mlx5_core 0000:00:03.0: E-Switch: Supported tc chains and prios offload mlx5_core 0000:00:03.0: Loading uplink representor for vport 65535 mlx5_core 0000:00:03.0: mlx5_cmd_out_err:816:(pid 456): \ QUERY_HCA_CAP(0x100) op_mod(0x0) failed, \ status bad parameter(0x3), syndrome (0x3a3846), err(-22) mlx5_core 0000:00:03.0 enp0s3np0 (unregistered): Unloading uplink \ representor for vport 65535 ------------[ cut here ]------------ kernel BUG at net/core/dev.c:12070! Oops: invalid opcode: 0000 [#1] SMP NOPTI CPU: 2 UID: 0 PID: 456 Comm: devlink Not tainted 6.16.0-rc3+ \ #9 PREEMPT(voluntary) RIP: 0010:unregister_netdevice_many_notify+0x123/0xae0 ... Call Trace: [ 90.923094] unregister_netdevice_queue+0xad/0xf0 [ 90.923323] unregister_netdev+0x1c/0x40 [ 90.923522] mlx5e_vport_rep_unload+0x61/0xc6 [ 90.923736] esw_offloads_enable+0x8e6/0x920 [ 90.923947] mlx5_eswitch_enable_locked+0x349/0x430 [ 90.924182] ? is_mp_supported+0x57/0xb0 [ 90.924376] mlx5_devlink_eswitch_mode_set+0x167/0x350 [ 90.924628] devlink_nl_eswitch_set_doit+0x6f/0xf0 [ 90.924862] genl_family_rcv_msg_doit+0xe8/0x140 [ 90.925088] genl_rcv_msg+0x18b/0x290 [ 90.925269] ? __pfx_devlink_nl_pre_doit+0x10/0x10 [ 90.925506] ? __pfx_devlink_nl_eswitch_set_doit+0x10/0x10 [ 90.925766] ? __pfx_devlink_nl_post_doit+0x10/0x10 [ 90.926001] ? __pfx_genl_rcv_msg+0x10/0x10 [ 90.926206] netlink_rcv_skb+0x52/0x100 [ 90.926393] genl_rcv+0x28/0x40 [ 90.926557] netlink_unicast+0x27d/0x3d0 [ 90.926749] netlink_sendmsg+0x1f7/0x430 [ 90.926942] __sys_sendto+0x213/0x220 [ 90.927127] ? __sys_recvmsg+0x6a/0xd0 [ 90.927312] __x64_sys_sendto+0x24/0x30 [ 90.927504] do_syscall_64+0x50/0x1c0 [ 90.927687] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.927929] RIP: 0033:0x7f7d0363e047
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 1, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-xilinxUpgrade linux-image-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-fips-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-azureUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-aws-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-awsUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fipsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-oracleUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-fips | May 25, 2026 | May 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 10, 2026 | May 1, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub