Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/mlx5: Fixed an implicit ODP hang during parent deregistration. Fixed the destroyunusedimplicitchildmr function to prevent a hang during parent deregistration as described in 1. When the destroyunusedimplicitchildmr functi...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/mlx5: Fixed overflow of the pagesize variable All variables storing the result of mlx5umemmkcfindbestpgsz have been changed to unsigned long to support values larger than 31 and to avoid overflow. For example, if we try t...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fixed the nullptrderef issue in mlx5createinner,ttctable. Added a NULL check for the value returned by mlx5getflownamespace in mlx5createinnerttctable and mlx5createttctable to prevent NULL pointer dereferencing...

PT-2025-30773

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential deadlock can occur in the IB/mlx5 module during Memory Region MR deregistration. This issue arises when kzalloc is invoked while holding the umem mutex or any lock acquired...

Vulnerability of components of Linux operating system’s kernel/mlx5, allowing a hacker to cause a service failure

The vulnerability of the net/mlx5 component in the Linux operating system’s kernel is related to incorrect blocking in the cmdworkhandler function in drivers/net/ethernet/mellanox/mlx5/core/cmd.c. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mlx5e_txwqe_complete() function in the drivers/net/ethernet/mellanox/mlx5/core/en_tx.c file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the mlx5etxwqecomplete function in the drivers/net/ethernet/mellanox/mlx5/core/entx.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment

A flaw was found in the Linux kernel's mlx5 InfiniBand driver. Certain scenarios could lead to a use-after-free issue, potentially allowing an attacker to escalate their privileges or affect system integrity or stability...

kernel: net/mlx5: Always stop health timer during driver removal

A vulnerability was found in the Linux kernel's mlx5 driver, in the driver removal process where the teardownhca function can fail, where the health timer may continue running, leading to a use-after-free condition when the timer attempts to access freed resources...

kernel: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink

In Linux kernel net/mlx5e, for SHAMPO, it is possible to receive CQEs with 0 consumed strides for the same WQE even after the WQE is fully consumed and unlinked. This triggers an additional unlink for the same wqe which corrupts the linked list...

kernel: net/mlx5: Always stop health timer during driver removal

A vulnerability was found in the Linux kernel's mlx5 driver, in the driver removal process where the teardownhca function can fail, where the health timer may continue running, leading to a use-after-free condition when the timer attempts to access freed resources...

kernel: net/mlx5: fs, lock FTE when checking if active

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, lock FTE when checking if active The referenced commits introduced a two-step process for deleting FTEs: - Lock the FTE, delete it from hardware, set the hardware deletion function to NULL and unlock the FTE. - Lock...

kernel: vdpa/mlx5: Fix invalid mr resource destroy

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix invalid mr resource destroy Certain error paths from mlx5vdpadevadd can end up releasing mr resources which never got initialized in the first place. This patch adds the missing check in mlx5vdpadestroymrresources ...

kernel: net/mlx5e: CT: Fix null-ptr-deref in add rule err flow

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT: Fix null-ptr-deref in add rule err flow In error flow of mlx5tcctentryaddrule, in case ctruleadd callback returns error, zonerule-attr is used uninitiated. Fix it to use attr which has the needed pointer value...

kernel: RDMA/mlx5: Fix a WARN during dereg_mr for DM type

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix a WARN during deregmr for DM type Memory regions MR of type DM device memory do not have an associated umem. In the mlx5ibderegmr - mlx5freeprivdescs flow, the code incorrectly takes the wrong branch, attempting to...

SUSE CVE-2025-37888

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5createinner,ttctable Add NULL check for mlx5getflownamespace returns in mlx5createinnerttctable and mlx5createttctable to prevent NULL pointer dereference...

DEBIAN-CVE-2025-37888

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5createinner,ttctable Add NULL check for mlx5getflownamespace returns in mlx5createinnerttctable and mlx5createttctable to prevent NULL pointer dereference...

UBUNTU-CVE-2025-37888

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5createinner,ttctable Add NULL check for mlx5getflownamespace returns in mlx5createinnerttctable and mlx5createttctable to prevent NULL pointer dereference...

CVE-2025-37888

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5createinner,ttctable Add NULL check for mlx5getflownamespace returns in mlx5createinnerttctable and mlx5createttctable to prevent NULL pointer dereference...

CVE-2025-37888 net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5createinner,ttctable Add NULL check for mlx5getflownamespace returns in mlx5createinnerttctable and mlx5createttctable to prevent NULL pointer dereference...

CVE-2025-37888 net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5createinner,ttctable Add NULL check for mlx5getflownamespace returns in mlx5createinnerttctable and mlx5createttctable to prevent NULL pointer dereference...