CVE-2026-68293

A flaw was found in the net/mlx5 driver of the Linux kernel. When the driver attempts to read the MCIA register from a device advertising the mcia32dwords capability, the mlx5querymcia function can read more data than the allocated buffer can hold. This leads to a buffer overflow, which can cause...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an IPsec RoCE MPV trace call issue with the net/mlx5 component. No detailed vulnerability details are provid...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the net/mlx5 component failing to properly stop the health timer during driver removal...

PT-2024-6941

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.7.0-68.fc38.x86 64 Description The vulnerability is related to the net/mlx5 driver in the Linux kernel. If the teardown hca function fails during driver removal, the health timer is not stopped, which can lead ...

CVE-2024-35961 net/mlx5: Register devlink first under devlink lock

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Register devlink first under devlink lock In case device is having a non fatal FW error during probe, the driver will report the error to user via devlink. This will trigger a WARNON, since mlx5 is calling devlinkregist...

PT-2022-34873 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.1 through v6.0.6 Description: The issue is related to a possible use-after-free in the async command interface of the net/mlx5 driver. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-35420

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.1 through v5.10.152 Description A potential issue exists in the async command interface of the net/mlx5 driver, which may lead to a use-after-free scenario. The actual impact and attack plausibility have not yet been...

PT-2022-28913

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.6 Description The issue is related to the net/mlx5 driver in the Linux Kernel. It involves the use of del timer sync in the firmware reset flow of halting poll. The actual impact and attack plausibility hav...

PT-2022-28550

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.20 Description The issue is related to the net/mlx5 driver in the Linux Kernel. It involves the use of del timer sync in the firmware reset flow of halting poll. The actual impact and attack plausibility ha...