The vulnerability of the mlx5_irq_alloc() function in the drivers/net/ethernet/mellanox/mlx5/core/pci_irq.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mlx5irqalloc function in the drivers/net/ethernet/mellanox/mlx5/core/pciirq.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this...

PT-2026-52325

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.0-rc6 Description A slab-out-of-bounds issue exists in the mlx5 query nic vport mac list function. The function determines the size of the firmware command buffer based on the Physical Function PF log max...

The vulnerability of the hws_pool_buddy_init() function in the drivers/net/ethernet/mellanox/mlx5/core/steering/hws/pool.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the hwspoolbuddyinit function in the drivers/net/ethernet/mellanox/mlx5/core/steering/hws/pool.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting...

The vulnerability of the mlxsw_m_linecards_init() function in the drivers/net/ethernet/mellanox/mlxsw/minimal.c module of the Mellanox Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mlxwminimal.c function in the drivers/net/ethernet/mlnx/mlxsw/minimal.c module of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability...

CVE-2026-23440 net/mlx5e: Fix race condition during IPSec ESN update

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix race condition during IPSec ESN update In IPSec full offload mode, the device reports an ESN Extended Sequence Number wrap event to the driver. The driver validates this event by querying the IPSec ASO and checking...

The vulnerability of the mlx5_tc_ct_entry_replacerule() function in the drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mlx5tcctentryreplacerule function in the drivers/net/ethernet/mellanox/mlx5/core/en/tcct.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the mlx5e_open_xdpredirect_sq() function in the drivers/net/ethernet/mellanox/mlx5/core/en_main.c driver of the Mellanox Ethernet adapter support module for the Linux operating system allows a attacker to access protected information or cause service failure.

The vulnerability of the mlx5eopenxdpredirectsq function in the drivers/net/ethernet/mellanox/mlx5/core/enmain.c driver of the Mellanox Ethernet adapter support module in the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this...

The vulnerabilities of the functions mlx5e_tc_esw_init() and mlx5e_tc_esw_cleanup() in the driver/net/ethernet/mellanox/mlx5/core/en_tc.c file of the Mellanox Ethernet network adapter driver for the Linux operating system, which allow a malicious actor to cause service failures.

The vulnerabilities of the functions mlx5etceswinit and mlx5etceswcleanup in the driver module drivers/net/ethernet/mellanox/mlx5/core/entc.c of the Mellanox Ethernet network adapter driver for the Linux operating system are related to pointer manipulation. Exploiting these vulnerabilities could...

The vulnerability of the mlx5e_fs_tt_redirect_any_create() function in the drivers/net/ethernet/mellanox/mlx5/core/en/fs_tt_redirect.c file of the Mellanox Ethernet network adapter driver for the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the mlx5efsttredirectanycreate function in the drivers/net/ethernet/mellanox/mlx5/core/en/fsttredirect.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended...

The vulnerability in the drivers/net/ethernet/mellanox/mlx5/core kernel of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the drivers/net/ethernet/mellanox/mlx5/core kernel of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

kernel: net/mlx5e: Check for NOT_READY flag state after locking

A race condition was found in the Linux kernel Mellanox mlx5 network driver's traffic control offload flow management. A local user with privileges to configure traffic control flower filters can trigger concurrent flow deletion operations where the NOTREADY flag is checked before acquiring the...

The vulnerability of the mlx5cmd_errtrace() function in the drivers/net/ethernet/mellanox/mlx5/core/cmd.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mlx5cmderrtrace function in the drivers/net/ethernet/mellanox/mlx5/core/cmd.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to buffer out-of-bounds writing. Exploiting this vulnerability could allow an attacker to compromis...

kernel: net/mlx5e: Check for NOT_READY flag state after locking

A race condition was found in the Linux kernel Mellanox mlx5 network driver's traffic control offload flow management. A local user with privileges to configure traffic control flower filters can trigger concurrent flow deletion operations where the NOTREADY flag is checked before acquiring the...

The vulnerability of the mlx5_unload_one() function in the drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlx5unloadone function in the drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c file of the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

kernel: net/mlx5e: Check for NOT_READY flag state after locking

A race condition was found in the Linux kernel Mellanox mlx5 network driver's traffic control offload flow management. A local user with privileges to configure traffic control flower filters can trigger concurrent flow deletion operations where the NOTREADY flag is checked before acquiring the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003652)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003652 advisory. A memory leak in the mlx5fwfatalreporterdump function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the Linux kernel before 5.3.11 allows attackers to cause...

ROS-20260112-7382

A vulnerability in the mlx5ehandlerxcqempwrqshampo function of the Mellanox Ethernet network adapter driver in the Linux operating system kernel is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20251111-03

Vulnerability of mlx5 driver Poll Mode Driver of DPDK package is related to incorrect data processing when working with Mellanox network devices. with Mellanox network devices. Exploitation of the vulnerability could allow an attacker, remotely to cause information disclosure or denial of service...

Vulnerability of the mlx5e_tc_hairpin_update_dead_peer() function in the drivers/net/ethernet/mellanox/mlx5/core/en_tc.c file – a driver for supporting Mellanox Ethernet network adapters in Linux operating systems, which allows a hacker to cause a service failure.

Vulnerability of the mlx5etchairpinupdatedeadpeer function in the drivers/net/ethernet/mellanox/mlx5/core/entc.c file – The Mellanox Ethernet network adapter driver for Linux operating systems is vulnerable due to the lack of memory release after the effective lifespan of the driver. Exploiting...

Vulnerability of the mlx5e_rep_tc_update_skb() function in the drivers/net/ethernet/mellanox/mlx5/core/en/rep/tc.c module – a driver for supporting Mellanox Ethernet network adapters in the Linux operating system. This vulnerability allows a attacker to cause a service failure.

Vulnerability of the mlx5ereptcupdateskb function in the drivers/net/ethernet/mellanox/mlx5/core/en/rep/tc.c module – The driver for Mellanox Ethernet network adapters in the Linux operating system relies on the uninitialized extension tcskb. Exploiting this vulnerability could allow an attacker ...