kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrummr: Fix use-after-free when updating multicast route stats Cited commit added a dedicated mutex instead of RTNL to protect the multicast route list, so that it will not change while the driver periodically traverse...

The vulnerability of the mlxsw_sp_pude_event_func() function in the drivers/net/ethernet/mellanox/mlxsw/spectrum.c file of the Mellanox Ethernet network adapter support driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the mlxswsppudeeventfunc function in the drivers/net/ethernet/mellanox/mlxsw/spectrum.c file of the Mellanox Ethernet network adapter support driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to caus...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986795)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986795 advisory. In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum: Protect driver from buggy firmware When processing port up/down events generated...

kernel: mlxsw: spectrum: Protect driver from buggy firmware

A vulnerability was found in the Linux kernel's mlxsw spectrum driver, where processing port up/down events leads to a NULL pointer dereference. This issue occurs when the driver fails to handle events for the CPU port, which exists but lacks a corresponding network device, resulting in system...

CVE-2021-47560

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum: Protect driver from buggy firmware When processing port up/down events generated by the device's firmware, the driver protects itself from events reported for non-existent local ports, but not the CPU port local...

UBUNTU-CVE-2021-47560

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum: Protect driver from buggy firmware When processing port up/down events generated by the device's firmware, the driver protects itself from events reported for non-existent local ports, but not the CPU port local...

CVE-2021-47560

The CVE-2021-47560 issue affects the Linux kernel mlxsw: spectrum driver. When processing port up/down events from device firmware, the driver failed to bail out for CPU port 0 (local port 0), which exists but lacks a netdev, risking a NULL pointer dereference on netif_carrier_{on,off}(). The emb...