PT-2025-38197

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's net/mlx5 component related to the handling of E-switch pairing during uplink un/load APIs. Specifically, when transitioning a device from switchdev mo...

GSD-2023-1001992 net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent

net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

GSD-2023-1001991 net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY)

net/mlx5e: Fix macsec possible null dereference when updating MAC security entity SecY This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by...

GSD-2023-1001930 net/mlx5e: Avoid false lock dependency warning on tc_ht even more

net/mlx5e: Avoid false lock dependency warning on tcht even more This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

PT-2023-35068 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue concerns the net/mlx5e driver in the Linux Kernel, specifically with IPoIB and Block PKEY interfaces having fewer receive queues than their parent interface. This could potentially...

GSD-2023-1001697 net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY)

net/mlx5e: Fix macsec possible null dereference when updating MAC security entity SecY This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by...

PT-2023-34773 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to a possible null dereference when updating MAC security entity SecY in the net/mlx5e module. The actual impact and attack plausibility have not yet been proven...

GSD-2023-1000883 net/mlx5e: Always clear dest encap in neigh-update-del

net/mlx5e: Always clear dest encap in neigh-update-del This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000414 net/mlx5e: Always clear dest encap in neigh-update-del

net/mlx5e: Always clear dest encap in neigh-update-del This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000254 net/mlx5e: Fix use-after-free when reverting termination table

net/mlx5e: Fix use-after-free when reverting termination table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.158 by commit...

GSD-2023-1000182 net/mlx5e: Fix use-after-free when reverting termination table

net/mlx5e: Fix use-after-free when reverting termination table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.82 by commit...

GSD-2023-1000094 net/mlx5e: Fix use-after-free when reverting termination table

net/mlx5e: Fix use-after-free when reverting termination table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

PT-2023-33491 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to the net/mlx5e component, where the destination encapsulation is not properly cleared during neighbor update deletion. This could potentially lead to security...

PT-2023-33331 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue is related to a use-after-free error when reverting the termination table in the net/mlx5e module. The actual impact and attack plausibility have not yet been proven...

PT-2023-33171 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a use-after-free error when reverting the termination table in the net/mlx5e module. The actual impact and attack plausibility have not yet been proven...

PT-2024-11813 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel, specifically in the net/mlx5e module, related to IPoIB and Block PKEY interfaces with less rx queues than the parent. The issue...

GSD-2022-1005275 net/mlx5e: xsk: Account for XSK RQ UMRs when calculating ICOSQ size

net/mlx5e: xsk: Account for XSK RQ UMRs when calculating ICOSQ size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

PT-2022-33533 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.3 through v5.19.1 Description: The issue concerns the calculation of ICOSQ size in the net/mlx5e driver, specifically when accounting for XSK RQ UMRs. This problem was introduced in version v5.3 and fixed in version...

GSD-2022-1002973 net/mlx5e: Disable softirq in mlx5e_activate_rq to avoid race condition

net/mlx5e: Disable softirq in mlx5eactivaterq to avoid race condition This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

GSD-2022-1002619 net/mlx5e: Disable softirq in mlx5e_activate_rq to avoid race condition

net/mlx5e: Disable softirq in mlx5eactivaterq to avoid race condition This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...