Mellanox Ethernet driver Heap Buffer Overflow

The vulnerability of the mlx5irqalloc function in the drivers/net/ethernet/mellanox/mlx5/core/pciirq.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this...

PT-2026-52325

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.0-rc6 Description A slab-out-of-bounds issue exists in the mlx5 query nic vport mac list function. The function determines the size of the firmware command buffer based on the Physical Function PF log max...

Mellanox Ethernet driver Heap Buffer Overflow

The vulnerability of the mlxwminimal.c function in the drivers/net/ethernet/mlnx/mlxsw/minimal.c module of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability...

Mellanox Ethernet Network Adapter Driver Heap Buffer Overflow DoS

The vulnerability of the hwspoolbuddyinit function in the drivers/net/ethernet/mellanox/mlx5/core/steering/hws/pool.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting...

CVE-2026-23440 net/mlx5e: Fix race condition during IPSec ESN update

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix race condition during IPSec ESN update In IPSec full offload mode, the device reports an ESN Extended Sequence Number wrap event to the driver. The driver validates this event by querying the IPSec ASO and checking...

Mellanox Ethernet network adapter driver Heap Buffer Overflow

The vulnerability of the mlx5tcctentryreplacerule function in the drivers/net/ethernet/mellanox/mlx5/core/en/tcct.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to...

Mellanox Ethernet mlx5e_open_xdpredirect_sq Buffer Overflow DoS

The vulnerability of the mlx5eopenxdpredirectsq function in the drivers/net/ethernet/mellanox/mlx5/core/enmain.c driver of the Mellanox Ethernet adapter support module in the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this...

Mellanox Ethernet driver Network Adapter DoS

The vulnerabilities of the functions mlx5etceswinit and mlx5etceswcleanup in the driver module drivers/net/ethernet/mellanox/mlx5/core/entc.c of the Mellanox Ethernet network adapter driver for the Linux operating system are related to pointer manipulation. Exploiting these vulnerabilities could...

Mellanox Ethernet Network Adapter Driver Heap Buffer Overflow DoS

The vulnerability of the mlx5efsttredirectanycreate function in the drivers/net/ethernet/mellanox/mlx5/core/en/fsttredirect.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended...

Linux kernel Mellanox mlx5 core Data Compromise

The vulnerability of the drivers/net/ethernet/mellanox/mlx5/core kernel of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

kernel: net/mlx5e: Check for NOT_READY flag state after locking

A race condition was found in the Linux kernel Mellanox mlx5 network driver's traffic control offload flow management. A local user with privileges to configure traffic control flower filters can trigger concurrent flow deletion operations where the NOTREADY flag is checked before acquiring the...

Mellanox Ethernet driver Heap Buffer Overflow

The vulnerability of the mlx5cmderrtrace function in the drivers/net/ethernet/mellanox/mlx5/core/cmd.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to buffer out-of-bounds writing. Exploiting this vulnerability could allow an attacker to compromis...

kernel: net/mlx5e: Check for NOT_READY flag state after locking

A race condition was found in the Linux kernel Mellanox mlx5 network driver's traffic control offload flow management. A local user with privileges to configure traffic control flower filters can trigger concurrent flow deletion operations where the NOTREADY flag is checked before acquiring the...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the mlx5unloadone function in the drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c file of the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

kernel: net/mlx5e: Check for NOT_READY flag state after locking

A race condition was found in the Linux kernel Mellanox mlx5 network driver's traffic control offload flow management. A local user with privileges to configure traffic control flower filters can trigger concurrent flow deletion operations where the NOTREADY flag is checked before acquiring the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003652)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003652 advisory. A memory leak in the mlx5fwfatalreporterdump function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the Linux kernel before 5.3.11 allows attackers to cause...

ROS-20260112-7382

A vulnerability in the mlx5ehandlerxcqempwrqshampo function of the Mellanox Ethernet network adapter driver in the Linux operating system kernel is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20251111-03

Vulnerability of mlx5 driver Poll Mode Driver of DPDK package is related to incorrect data processing when working with Mellanox network devices. with Mellanox network devices. Exploitation of the vulnerability could allow an attacker, remotely to cause information disclosure or denial of service...

mlx5e_tc_hairpin_update_dead_peer Buffer Overflow DoS

Vulnerability of the mlx5etchairpinupdatedeadpeer function in the drivers/net/ethernet/mellanox/mlx5/core/entc.c file – The Mellanox Ethernet network adapter driver for Linux operating systems is vulnerable due to the lack of memory release after the effective lifespan of the driver. Exploiting...

mlx5e_rep_tc_update_skb Heap Buffer Overflow DoS

Vulnerability of the mlx5ereptcupdateskb function in the drivers/net/ethernet/mellanox/mlx5/core/en/rep/tc.c module – The driver for Mellanox Ethernet network adapters in the Linux operating system relies on the uninitialized extension tcskb. Exploiting this vulnerability could allow an attacker ...