The vulnerability of the WARN_ON() function in the drivers/net/ethernet/mellanox/mlx5/core/en_main.c kernel of Linux operating systems allows an attacker to compromise the accessibility of protected information.

🗓️ 24 Jul 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

The WARN_ON vulnerability in mlx5 en_main.c with insufficient input validation could expose protected information.

Reporter	Title	Published	Views	Family All 131
Tenable Nessus	Amazon Linux 2023 : bpftool, kernel6.12, kernel6.12-modules-extra (ALAS2023-2025-1052)	10 Jul 202500:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: kernel (CVE-2025-38039)	22 Jan 202600:00	–	nessus
Tenable Nessus	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20480)	18 Jul 202500:00	–	nessus
Tenable Nessus	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20530)	19 Aug 202500:00	–	nessus
Tenable Nessus	Ubuntu 24.04 LTS / 25.04 : Linux kernel vulnerabilities (USN-7769-1)	25 Sep 202500:00	–	nessus
Tenable Nessus	Ubuntu 25.04 : Linux kernel (Azure) vulnerabilities (USN-7770-1)	25 Sep 202500:00	–	nessus
Tenable Nessus	Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-7771-1)	25 Sep 202500:00	–	nessus
Tenable Nessus	Ubuntu 24.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-7789-1)	2 Oct 202500:00	–	nessus
Tenable Nessus	Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-8028-1)	12 Feb 202600:00	–	nessus
Tenable Nessus	Ubuntu 22.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8031-1)	13 Feb 202600:00	–	nessus

Vulners

Node

red_hat red_hat_enterprise_linuxMatch8

OR

red_hat red_hat_enterprise_linuxMatch9

OR

red_hat red_hat_enterprise_linuxMatch10

Source	Link
lore	www.lore.kernel.org/linux-cve-announce/2025061827-CVE-2025-38039-919c@gregkh/
git	www.git.kernel.org/stable/c/090c0ba179eaf7b670e720aa054533756a43d565
git	www.git.kernel.org/stable/c/689805dcc474c2accb5cffbbcea1c06ee4a54570
git	www.git.kernel.org/stable/c/9e2bac6835f73895598df5a3a125a19497fad46b
git	www.git.kernel.org/stable/c/b82e496531c571caf8a2ef247f51c160bab2162e
access	www.access.redhat.com/security/cve/CVE-2025-38039
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.14/
web	www.web.nvd.nist.gov/view/vuln/detail

17 Feb 2026 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 23.8

CVSS 34.1

EPSS0.00052

kernel warning mlx5 driver input validation information exposure