PT-2026-2522 · Mlx5+1 · Mlx5+1

Published 2025-12-02 · Updated 2026-01-13 · CVE-2025-68790

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.18.0-20251130.rc7.git0.16131a59cab1.300.fc43.s390x+debug and earlier

Description The Linux kernel contained an issue in the net/mlx5 component where the HCA PORTS component could be unregistered twice. This double unregistration occurred during LAG teardown, potentially leading to a use-after-free condition. On s390 systems, PCI level recovery events could trigger this issue through multiple passes through mlx5 unload one(), resulting in kernel panics. The issue was observed during PCI error recovery testing with increased kernel debug features enabled.

Recommendations Update to a newer version of the Linux kernel to address this vulnerability.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-01050

CVE-2025-68790

Affected Products

Linux Kernel

Mlx5

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68790.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-68790 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-68790 · Security Note
• https://osv.dev/vulnerability/CVE-2025-68790 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68790 · Security Note
• https://bdu.fstec.ru/vul/2026-01050 · Security Note
• https://ubuntu.com/security/CVE-2025-68790 · Vendor Advisory
• https://git.kernel.org/stable/c/6a107cfe9c99a079e578a4c5eb70038101a3599f · Note
• https://twitter.com/CVEnew/status/2011112384358724075 · Twitter Post
• https://git.kernel.org/linus/6a107cfe9c99a079e578a4c5eb70038101a3599f · Note
• https://cybersecurity-help.cz/vdb/SB2026011433 · Note
• https://git.kernel.org/stable/c/d2495f529d60e8e8c43e6ad524089c38b8be7bc4 · Note
• https://lore.kernel.org/linux-cve-announce/2026011304-CVE-2025-68790-6166@gregkh · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note