CVE-2026-99078

A flaw was found in the Linux kernel's Mellanox network driver mlx5e. When processing high-speed network traffic using XDP eXpress Data Path sockets under low-memory conditions, a failure during receive queue replenishment can cause previously freed memory buffers to be released again through sta...

[SECURITY] Fedora 45 Update: mstflint-4.37.0_1.1-2.fc45

This package contains firmware update tool, vpd dump and register dump tools for network adapters based on Mellanox Technologies chips...

CVE-2026-98807

A flaw was found in the Linux kernel's Mellanox ConnectX mlx5 network driver. It allows a privileged local user to cause a Denial of Service DoS via an out-of-bounds memory read. When processing Link Aggregation LAG events, the driver incorrectly applies bonding-specific operations to smaller...

CVE-2026-98791

A flaw was found in the Linux kernel's Mellanox network driver mlx5e. A local user can exploit this vulnerability to cause a denial of service DoS through a system crash. During the teardown of an AFXDP eXpress Data Path transmit queue, outstanding descriptors requesting a transmit timestamp are...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix incorrect list API usage Both the function that migrates all the chunks within a region and the function that migrates all the entries within a chunk call listfirstentry on the respective lists without...

[SECURITY] Fedora 45 Update: mstflint-4.36.0-4.fc45

This package contains firmware update tool, vpd dump and register dump tools for network adapters based on Mellanox Technologies chips...

CVE-2026-98016

A flaw was found in the Linux kernel's Mellanox network driver mlx5e. A race condition occurs during the concurrent teardown of traffic control TC sample rules sharing the same context, causing the system to reference memory after it has already been freed. A local user with network administrativ...

CVE-2026-98014

A flaw was found in the Linux kernel's Mellanox network driver mlx5. This vulnerability allows a local privileged user to cause a Denial of Service DoS through a system crash. During hardware reset or error recovery procedures, improper cleanup when disabling a virtual network port leaves stale...

ROS-20260925-73-0162

The vulnerability of the mlx5einitreprx function in the drivers/net/ethernet/mellanox/mlx5/core/enrep.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to compromise th...

ROS-20260924-73-0064

The vulnerability of the mlx5eptpopen function in the drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c driver for Mellanox Ethernet network adapters in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failur...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fixed the initialization of the CQ fragments buffer. The function initcqfragbuf can be used to initialize the current CQ fragments buffer cq-buf, or the temporary cq-resizebuf that is filled during the CQ resize operatio...

ROS-20260827-73-0025

The vulnerability of the mlx5drcmdcreatereformatctx function in the drivers/net/ethernet/mellanox/mlx5/core/steering/drcmd.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could...

Mellanox Ethernet Network Adapter Heap Buffer Overflow

The vulnerability of the mlx5eskbfromcqempwrqnonlinear function in the drivers/net/ethernet/mellanox/mlx5/core/enrx.c file of the Ethernet Mellanox network adapter driver in the Linux operating system is related to errors in resource counters. Exploiting this vulnerability could allow an attacker...

Mellanox Ethernet driver Network Information Disclosure

The vulnerability of the functions removeunreadyflow and mlx5etcdelfdbflow in the driver/net/ethernet/mellanox/mlx5/core/entc.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this...

Mellanox Ethernet network adapter driver Heap Buffer Overflow DoS

The vulnerability of the mlx5etcqueryroutevport function in the drivers/net/ethernet/mellanox/mlx5/core/entc.c driver for Mellanox Ethernet network adapters in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability may allow an attacker to cause a...

Mellanox Ethernet Network Adapter Driver Heap Buffer Overflow DoS

The vulnerability of the mlx5enicinit function in the drivers/net/ethernet/mellanox/mlx5/core/enmain.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an...

USN-8630-4: Linux kernel (AWS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructur...

USN-8630-3 linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructur...

Mellanox Ethernet Network Adapter Driver DoS

The vulnerability in the mlx5etcdelfdbpeerflow and mlx5etccleanfdbpeerflows functions within the drivers/net/ethernet/mellanox/mlx5/core/entc.c file of the Mellanox Ethernet network adapter driver in the Linux kernel is related to dereferencing pointers. Exploitation of this vulnerability may all...

ROS-20260803-73-0032

The vulnerability of the eswinlinemodetodevlink function in the drivers/net/ethernet/mellanox/mlx5/core/eswitchoffloads.c file of the Mellanox Ethernet adapter support driver for Linux operating systems is related to improper release of resources. Exploiting this vulnerability could allow an...