CVE-2025-40238

Mellanox ConnectX drivers encounter a race during network device detachment where IPsec MPV events continue arriving after the netdev becomes invalid. The mlx5edetachnetdev path disables event handlers too late, allowing mlx5devcomcompsetready to dereference a stale pointer. Proper ordering...