PT-2025-13219 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the net/mlx5 component. The problem occurs when enabling vport QoS fails, resulting in the scheduling node...

Vulnerability of components of Linux operating system’s kernel/mlx5, allowing a hacker to cause a service failure

The vulnerability of the net/mlx5 components in the Linux operating system’s kernel is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of components of Linux operating system’s kernel/mlx5, allowing a hacker to cause a service failure

The vulnerability of the net/mlx5 components in the Linux operating system’s kernel is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mlx5_lagdestroy_definers() function in the mlx5 driver (drivers/net/ethernet/mellanox/mlx5/core/lag/port_sel.c) in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the mlx5lagdestroydefiners function in the mlx5 driver drivers/net/ethernet/mellanox/mlx5/core/lag/portsel.c in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mlx5 driver (drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c) in Linux operating systems, which allows a hacker to cause a service failure.

The vulnerability of the mlx5 driver drivers/net/ethernet/mellanox/mlx5/core/enaccel/ipsec.c in Linux operating systems is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...

Vulnerability of components of Linux operating system’s kernel/mlx5, allowing a hacker to cause a service failure

The vulnerability of the net/mlx5 components in the Linux operating system’s kernel is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fixed the initialization of the command bitmask. The command bitmask contains a dedicated bit for the MANAGEPAGES command. This bit is not initialized during the initialization of the command bitmask; it is only...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Prevent potential error pointer dereferencing. The drdomainaddvportcap function generally returns NULL on error. However, sometimes we want it to return ERRPTR-EBUSY so that the caller can retry. The issue here is that...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fixed the issue of missing lock acquisition before performing sync reset reload operations. During sync reset reload operations, when a remote host updates devlink during the reload process, the lock acquisition before...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: macsec: Fixed a use-after-free issue during the sending of the offloading packet. KASAN reports the following UAF. The metadatadst, which is used to store the SCI value for macsec offloading, is already freed by metadatadstfre...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Added a timeout to the acquisition of the command queue semaphore. Prevented forced completion handling on an entry that has not yet been assigned an index, thereby avoiding an out-of-bounds access at idx = -22. Instead...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fixed operations related to bridge mode when there are no VFs. Currently, attempting to set the bridge mode attribute when numvfs=0 leads to a crash: bridge link set dev eth2 hwmode vepa 168.967392 BUG: Kernel NULL...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT: Fixed the null-ptr-deref in addruleerrflow In the error flow of mlx5tcctentryaddrule, if the ctruleadd callback returns an error, zonerule-attr is used without initialization. This issue was fixed by using attr,...

ROS-20250205-01

A vulnerability in the net/mlx5 components of the Linux operating system kernel is related to errors in accessing statistics of of commands after release. Exploitation of the vulnerability could allow an attacker to cause a denial of denial of service A vulnerability in the platform/surface...

Important: kernel-livepatch-6.1.96-102.177

Issue Overview: kernel: virtio-net: tap: mlx5core short frame denial of service CVE-2024-41090 kernel: virtio-net: tun: mlx5core short frame denial of service CVE-2024-41091 Affected Packages: kernel-livepatch-6.1.96-102.177 Issue Correction: Please ensure you have live patching enabled. Run dnf...

Important: kernel-livepatch-6.1.97-104.177

Issue Overview: kernel: virtio-net: tap: mlx5core short frame denial of service CVE-2024-41090 kernel: virtio-net: tun: mlx5core short frame denial of service CVE-2024-41091 Affected Packages: kernel-livepatch-6.1.97-104.177 Issue Correction: Please ensure you have live patching enabled. Run dnf...

Important: kernel-livepatch-6.1.94-99.176

Issue Overview: kernel: virtio-net: tap: mlx5core short frame denial of service CVE-2024-41090 kernel: virtio-net: tun: mlx5core short frame denial of service CVE-2024-41091 Affected Packages: kernel-livepatch-6.1.94-99.176 Issue Correction: Please ensure you have live patching enabled. Run dnf...

SUSE CVE-2025-21674

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel Attempt to enable IPsec packet offload in tunnel mode in debug kernel generates the following kernel panic, which is happening due to two issues: 1. In SA ad...

SUSE CVE-2025-21675

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clear port select structure when fail to create Clear the port select structure on error so no stale values left after definers are destroyed. That's because the mlx5lagdestroydefiners always try to destroy all lag...

CVE-2025-21675

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clear port select structure when fail to create Clear the port select structure on error so no stale values left after definers are destroyed. That's because the mlx5lagdestroydefiners always try to destroy all lag...