PT-2026-5538 · Linux+2 · Linux Kernel+2
Published
2026-01-01
·
Updated
2026-05-22
·
CVE-2026-23035
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.18.0-rc5+ #115
Description
The Linux kernel contains a flaw in the mlx5e network driver. Specifically, the
mlx5e priv structure, which is unstable, could be cleared if profile attachment failed. This issue occurs because the netdev pointer was not correctly passed to the mlx5e destroy netdev() function. This could lead to a kernel oops during mlx5e remove when switchdev mode fails due to profile change failures. The issue manifests as a kernel NULL pointer dereference within the mlx5e dcbnl dscp app function.Recommendations
Update to Linux kernel version 6.18.0-rc5+ #115 or a later version to resolve this issue.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Ubuntu
Mlx5E