UBUNTU-CVE-2026-98015

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch: fix use-after-free in mlx5eswitchtermtblput In mlx5eswitchtermtblput, the zero-ref cleanup check reads tt-refcount after termtblmutex has been released. Two concurrent callers on the same mlx5termtblhandle rac...

CVE-2026-98015 net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch: fix use-after-free in mlx5eswitchtermtblput In mlx5eswitchtermtblput, the zero-ref cleanup check reads tt-refcount after termtblmutex has been released. Two concurrent callers on the same mlx5termtblhandle rac...

CVE-2026-98014

The Linux kernel contains a vulnerability in the net/mlx5 driver related to E-Switch functionality. During FW-fatal recovery (where dev->state == INTERNAL_ERROR), a failure in esw_update_vport_rx_mode() leaves vport->allmulti_rule intact. This causes esw_update_vport_mc_promisc() to add ent...

GSD-2022-1002579 net/mlx5: E-Switch, pair only capable devices

net/mlx5: E-Switch, pair only capable devices This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...