Lucene search
K

187 matches found

CVE
CVE
added 2026/01/31 11:42 a.m.22 views

CVE-2026-23035

The CVE-2026-23035 entries describe a Linux kernel mlx5e issue where mlx5e_priv is an unstable structure that can be memset(0) if profile attaching fails. The fix involves passing netdev to mlx5e_destroy_netdev() instead of priv and validating priv->profile in mlx5e_remove to avoid operating o...

5.8AI score0.00209EPSS
Exploits0References3
EUVD
EUVD
added 2026/01/31 11:42 a.m.3 views

EUVD-2026-5059

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Pass netdev to mlx5edestroynetdev instead of priv mlx5epriv is an unstable structure that can be memset0 if profile attaching fails. Pass netdev to mlx5edestroynetdev to guarantee it will work on a valid netdev. On...

5.8AI score0.00209EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/31 11:42 a.m.3 views

CVE-2026-23035

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Pass netdev to mlx5edestroynetdev instead of priv mlx5epriv is an unstable structure that can be memset0 if profile attaching fails. Pass netdev to mlx5edestroynetdev to guarantee it will work on a valid netdev. On...

5.7AI score0.00209EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2026/01/31 11:42 a.m.7 views

CVE-2026-23035 net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Pass netdev to mlx5edestroynetdev instead of priv mlx5epriv is an unstable structure that can be memset0 if profile attaching fails. Pass netdev to mlx5edestroynetdev to guarantee it will work on a valid netdev. On...

5.8AI score0.00209EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2026/01/26 12:24 a.m.4 views

SUSE CVE-2026-23000

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash on profile change rollback failure mlx5enetdevchangeprofile can fail to attach a new profile and can fail to rollback to old profile, in such case, we could end up with a dangling netdev with a fully reset...

5.5CVSS5.3AI score0.0015EPSS
Exploits0References20
NVD
NVD
added 2026/01/25 3:15 p.m.8 views

CVE-2026-22996

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't store mlx5epriv in mlx5edev devlink priv mlx5epriv is an unstable structure that can be memset0 if profile attaching fails, mlx5epriv in mlx5edev devlink private is used to reference the netdev and mdev associate...

5.5CVSS0.00155EPSS
Exploits0References3
NVD
NVD
added 2026/01/25 3:15 p.m.8 views

CVE-2026-23000

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash on profile change rollback failure mlx5enetdevchangeprofile can fail to attach a new profile and can fail to rollback to old profile, in such case, we could end up with a dangling netdev with a fully reset...

5.5CVSS0.0015EPSS
Exploits0References3
OSV
OSV
added 2026/01/25 3:15 p.m.3 views

AZL-78476 CVE-2026-22996 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't store mlx5epriv in mlx5edev devlink priv mlx5epriv is an unstable structure that can be memset0 if profile attaching fails, mlx5epriv in mlx5edev devlink private is used to reference the netdev and mdev associate...

5.5CVSS5.6AI score0.00155EPSS
Exploits0References1
OSV
OSV
added 2026/01/25 3:15 p.m.5 views

AZL-77343 CVE-2026-23000 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash on profile change rollback failure mlx5enetdevchangeprofile can fail to attach a new profile and can fail to rollback to old profile, in such case, we could end up with a dangling netdev with a fully reset...

5.5CVSS5.6AI score0.0015EPSS
Exploits0References1
OSV
OSV
added 2026/01/25 3:15 p.m.2 views

AZL-77295 CVE-2026-22996 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't store mlx5epriv in mlx5edev devlink priv mlx5epriv is an unstable structure that can be memset0 if profile attaching fails, mlx5epriv in mlx5edev devlink private is used to reference the netdev and mdev associate...

5.5CVSS5.6AI score0.00155EPSS
Exploits0References1
OSV
OSV
added 2026/01/25 3:15 p.m.3 views

AZL-78324 CVE-2026-23000 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash on profile change rollback failure mlx5enetdevchangeprofile can fail to attach a new profile and can fail to rollback to old profile, in such case, we could end up with a dangling netdev with a fully reset...

5.5CVSS5.6AI score0.0015EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2026/01/25 3:15 p.m.1 views

CVE-2026-22996

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't store mlx5epriv in mlx5edev devlink priv mlx5epriv is an unstable structure that can be memset0 if profile attaching fails, mlx5epriv in mlx5edev devlink private is used to reference the netdev and mdev associate...

5.5CVSS5.9AI score0.00155EPSS
Exploits0References11
OSV
OSV
added 2026/01/25 3:15 p.m.3 views

UBUNTU-CVE-2026-23000

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash on profile change rollback failure mlx5enetdevchangeprofile can fail to attach a new profile and can fail to rollback to old profile, in such case, we could end up with a dangling netdev with a fully reset...

5.5CVSS5.7AI score0.0015EPSS
Exploits0References14
Cvelist
Cvelist
added 2026/01/25 2:36 p.m.32 views

CVE-2026-23000 net/mlx5e: Fix crash on profile change rollback failure

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash on profile change rollback failure mlx5enetdevchangeprofile can fail to attach a new profile and can fail to rollback to old profile, in such case, we could end up with a dangling netdev with a fully reset...

0.0015EPSS
Exploits0References3
CVE
CVE
added 2026/01/25 2:36 p.m.21 views

CVE-2026-23000

CVE-2026-23000 concerns the Linux kernel mlx5e driver. The issue occurs when mlx5e_netdev_change_profile fails to attach a new profile and then cannot rollback to the old one, leaving a dangling netdev with a reset priv. A second change-profile attempt (e.g., via switchdev) can crash when derefer...

5.5CVSS5.3AI score0.0015EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2026/01/25 2:36 p.m.5 views

EUVD-2026-4618

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash on profile change rollback failure mlx5enetdevchangeprofile can fail to attach a new profile and can fail to rollback to old profile, in such case, we could end up with a dangling netdev with a fully reset...

5.3AI score0.0015EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/25 2:36 p.m.2 views

CVE-2026-23000

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash on profile change rollback failure mlx5enetdevchangeprofile can fail to attach a new profile and can fail to rollback to old profile, in such case, we could end up with a dangling netdev with a fully reset...

5.7AI score0.0015EPSS
Exploits0References4Affected Software1
EUVD
EUVD
added 2026/01/25 2:36 p.m.3 views

EUVD-2026-4630

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't store mlx5epriv in mlx5edev devlink priv mlx5epriv is an unstable structure that can be memset0 if profile attaching fails, mlx5epriv in mlx5edev devlink private is used to reference the netdev and mdev associate...

5.3AI score0.00155EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/25 2:36 p.m.3 views

CVE-2026-22996

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't store mlx5epriv in mlx5edev devlink priv mlx5epriv is an unstable structure that can be memset0 if profile attaching fails, mlx5epriv in mlx5edev devlink private is used to reference the netdev and mdev associate...

5.7AI score0.00155EPSS
Exploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/01/25 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-23000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: Fix crash on profile change rollback failure mlx5enetdevchangeprofile can fail to attach a new profile and can fail to rollback to old profile, in su...

5.5CVSS5.6AI score0.0015EPSS
Exploits0References4
Rows per page
Query Builder