net/mlx5e: Disable MACsec offload for uplink representor profile

{
  "id": "e12ecc1d3e3f91025949dd1a0f4ee8c51dc67ba788e6eb703f901a36298ff0e4",
  "url": "https://osv.dev/vulnerability/CVE-2025-38020",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "net/mlx5e: Disable MACsec offload for uplink representor profile",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Disable MACsec offload for uplink representor profile MACsec offload is not supported in switchdev mode for uplink representors. When switching to the uplink representor profile, the MACsec offload feature must be cleared from the netdevice's features. If left enabled, attempts to add offloads result in a null pointer dereference, as the uplink representor does not support MACsec offload even though the feature bit remains set. Clear NETIF_F_HW_MACSEC in mlx5e_fix_uplink_rep_features(). Kernel log: Oops: general protection fault, probably for non-canonical address 0xdffffc000000000f: 0000 [#1] SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000078-0x000000000000007f] CPU: 29 UID: 0 PID: 4714 Comm: ip Not tainted 6.14.0-rc4_for_upstream_debug_2025_03_02_17_35 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 RIP: 0010:__mutex_lock+0x128/0x1dd0 Code: d0 7c 08 84 d2 0f 85 ad 15 00 00 8b 35 91 5c fe 03 85 f6 75 29 49 8d 7e 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a6 15 00 00 4d 3b 76 60 0f 85 fd 0b 00 00 65 ff RSP: 0018:ffff888147a4f160 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001 RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000078 RBP: ffff888147a4f2e0 R08: ffffffffa05d2c19 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 000",
    "evidence": "osv:CVE-2025-38020",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.1.140",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.6.92",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.12.30",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.14.8",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2025-38020",
      "aliases": [
        "CVE-2025-38020"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "8ff0ac5be1446920d71bdce5547f0d8476e280ff"
                },
                {
                  "fixed": "1e577aeb51e9deba4f2c10edfcb07cb3cb406598"
                },
                {
                  "fixed": "b48a47e137cedfd79655accaeeea6b296ad0b9e1"
                },
                {
                  "fixed": "1f80e6ff026041721d8089da8c269b1963628325"
                },
                {
                  "fixed": "1a69d53922c1221351739f17837d38e317234e5d"
                },
                {
                  "fixed": "588431474eb7572e57a927fa8558c9ba2f8af143"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38020.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.1.0"
                },
                {
                  "fixed": "6.1.140"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.6.92"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.7.0"
                },
                {
                  "fixed": "6.12.30"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.13.0"
                },
                {
                  "fixed": "6.14.8"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38020.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:44.053756958Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/1a69d53922c1221351739f17837d38e317234e5d",
        "https://git.kernel.org/stable/c/1e577aeb51e9deba4f2c10edfcb07cb3cb406598",
        "https://git.kernel.org/stable/c/1f80e6ff026041721d8089da8c269b1963628325",
        "https://git.kernel.org/stable/c/588431474eb7572e57a927fa8558c9ba2f8af143",
        "https://git.kernel.org/stable/c/b48a47e137cedfd79655accaeeea6b296ad0b9e1",
        "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38020.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-38020",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38020.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-38020",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 511639,
  "published_at": "2025-06-18T09:28:27.674+00:00"
}