Lucene search
+L

51 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/17 12:00 a.m.•0 views

CVE-2023-53347: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Handle pairing of E-switch via uplink un/load APIs In case user switch a device from switchdev mode to legacy mode, mlx5 first unpair the E-switch and afterwards unload the uplink vport. From the other hand, in case use...

5.5CVSS5.7AI score0.00201EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/07 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2023-53058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, Fix an Oops in error handling code The error handling dereferences vport...

5.5CVSS6.3AI score0.00209EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2025/05/02 4:15 p.m.•7 views

CVE-2023-53058

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, Fix an Oops in error handling code The error handling dereferences "vport". There is nothing we can do if it is an error pointer except returning the error code...

5.5CVSS6.3AI score0.00209EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2025/05/02 4:15 p.m.•12 views

CVE-2023-53058

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, Fix an Oops in error handling code The error handling dereferences "vport". There is nothing we can do if it is an error pointer except returning the error code...

5.5CVSS0.00209EPSS
SaveExploits0References5
OSV
OSV
•added 2025/05/02 3:55 p.m.•12 views

CVE-2023-53058 net/mlx5: E-Switch, Fix an Oops in error handling code

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, Fix an Oops in error handling code The error handling dereferences "vport". There is nothing we can do if it is an error pointer except returning the error code...

6AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2025/05/02 3:55 p.m.•43 views

CVE-2023-53058 net/mlx5: E-Switch, Fix an Oops in error handling code

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, Fix an Oops in error handling code The error handling dereferences "vport". There is nothing we can do if it is an error pointer except returning the error code...

0.00209EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/05/02 12:00 a.m.•7 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a dereferencing of the wrong pointer in the mlx5 E-Switch error handling, which could lead to a null pointer...

5.5CVSS6.3AI score0.00209EPSS
SaveExploits0References5
OSV
OSV
•added 2025/02/26 7:01 a.m.•30 views

AZL-68618 CVE-2022-49333 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, pair only capable devices OFFLOADS paring using devcom is possible only on devices that support LAG. Filter based on lag capabilities. This fixes an issue where mlx5getnextphysdev was called without holding th...

5.5CVSS6.1AI score0.00258EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/26 7:01 a.m.•6 views

DEBIAN-CVE-2022-49333

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, pair only capable devices OFFLOADS paring using devcom is possible only on devices that support LAG. Filter based on lag capabilities. This fixes an issue where mlx5getnextphysdev was called without holding th...

5.5CVSS5.3AI score0.00258EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/26 2:10 a.m.•34 views

CVE-2022-49333 net/mlx5: E-Switch, pair only capable devices

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, pair only capable devices OFFLOADS paring using devcom is possible only on devices that support LAG. Filter based on lag capabilities. This fixes an issue where mlx5getnextphysdev was called without holding th...

0.00258EPSS
SaveExploits0References3
CVE
CVE
•added 2025/02/26 2:10 a.m.•175 views

CVE-2022-49333

Consolidated from multiple sources: CVE-2022-49333 affects Linux kernels with Mellanox mlx5 E-Switch offloads on pair-only capable devices. Root cause: mlx5_get_next_phys_dev() could be invoked without holding the interface lock, after an assert introduced by the Lag/filter changes. This conditio...

5.5CVSS5.3AI score0.00258EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2025/02/26 2:10 a.m.•21 views

CVE-2022-49333

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, pair only capable devices OFFLOADS paring using devcom is possible only on devices that support LAG. Filter based on lag capabilities. This fixes an issue where mlx5getnextphysdev was called without holding th...

5.5CVSS5.3AI score0.00258EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•16 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the mlx5 E-Switch not properly pairing devices...

5.5CVSS5.3AI score0.00258EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2024/11/07 5:02 p.m.•17 views

CVE-2024-50146

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't call cleanup on profile rollback failure When profile rollback fails in mlx5enetdevchangeprofile, the netdev profile var is left set to NULL. Avoid a crash when unloading the driver by not calling profile-cleanup...

4.4CVSS6.6AI score0.00231EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/11/07 9:31 a.m.•29 views

CVE-2024-50146 net/mlx5e: Don't call cleanup on profile rollback failure

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't call cleanup on profile rollback failure When profile rollback fails in mlx5enetdevchangeprofile, the netdev profile var is left set to NULL. Avoid a crash when unloading the driver by not calling profile-cleanup...

0.00231EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2024/08/01 12:08 p.m.•33 views

CVE-2024-42142

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-switch, Create ingress ACL when needed Currently, ingress acl is used for three features. It is created only when vport metadata match and prio tag are enabled. But active-backup lag mode also uses it. It is independe...

4.4CVSS8.1AI score0.00225EPSS
SaveExploits0References4
OSV
OSV
•added 2024/07/30 8:15 a.m.•6 views

DEBIAN-CVE-2024-42142

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-switch, Create ingress ACL when needed Currently, ingress acl is used for three features. It is created only when vport metadata match and prio tag are enabled. But active-backup lag mode also uses it. It is independe...

5.5CVSS5.2AI score0.00225EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/30 8:15 a.m.•16 views

UBUNTU-CVE-2024-42142

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-switch, Create ingress ACL when needed Currently, ingress acl is used for three features. It is created only when vport metadata match and prio tag are enabled. But active-backup lag mode also uses it. It is independe...

5.5CVSS6AI score0.00225EPSS
SaveExploits0References17
Vulnrichment
Vulnrichment
•added 2024/07/30 7:46 a.m.•28 views

CVE-2024-42142 net/mlx5: E-switch, Create ingress ACL when needed

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-switch, Create ingress ACL when needed Currently, ingress acl is used for three features. It is created only when vport metadata match and prio tag are enabled. But active-backup lag mode also uses it. It is independe...

6.9AI score0.00225EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/07/30 7:46 a.m.•44 views

CVE-2024-42142 net/mlx5: E-switch, Create ingress ACL when needed

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-switch, Create ingress ACL when needed Currently, ingress acl is used for three features. It is created only when vport metadata match and prio tag are enabled. But active-backup lag mode also uses it. It is independe...

0.00225EPSS
SaveExploits0References4
Rows per page
Query Builder