net/mlx5: LAG, Fix off-by-one in single-FDB error rollback
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, Fix off-by-one in single-FDB error rollback On failure at index i, the reverse cleanup loop in mlx5_lag_create_single_fdb() starts from i, so the failed index itself is rolled back. That can operate on uninitialized state or double-tear-down a rule the add_one path already self-rolled-back. Start the rollback from i - 1 so only successfully-installed entries are undone.
CVE-2026-72345
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-72345
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "ddbb5ddc43ad000a984149db5af1133433938404",
"lessThan": "0be672071d6e8c4d3be6a8f796d8e47198763770",
"versionType": "git"
},
{
"status": "affected",
"version": "ddbb5ddc43ad000a984149db5af1133433938404",
"lessThan": "40cc06bf71476932e5d139fa326dcd0372766e16",
"versionType": "git"
},
{
"status": "affected",
"version": "ddbb5ddc43ad000a984149db5af1133433938404",
"lessThan": "0f0e4ae6975c773f7854fc48932a267f6c79088f",
"versionType": "git"
},
{
"status": "affected",
"version": "8330e9f0214c0f0b73c57b3f3f619b64c8035029",
"versionType": "git"
},
{
"status": "affected",
"version": "6.12.113",
"lessThan": "6.13",
"versionType": "semver"
}
],
"programFiles": [
"drivers/net/ethernet/mellanox/mlx5/core/lag/shared_fdb.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6.14"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "6.14",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.18.57",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.1.5",
"versionType": "semver",
"lessThanOrEqual": "7.1.*"
},
{
"status": "unaffected",
"version": "7.2",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/net/ethernet/mellanox/mlx5/core/lag/shared_fdb.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-72345
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #33031 · Revision 1
- Added to Heist Feed
- Publisher date