01 Record

CVE-2026-98014

net/mlx5: E-Switch, prevent mc_list repopulation during vport disable

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

net/mlx5: E-Switch, prevent mc_list repopulation during vport disable

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 6.6% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-09-25 10:23Z1 MO AGO

Last updated

2026-10-19 09:12Z10 DAYS AGO

Reserved

2026-09-25

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-825Expired Pointer DereferenceBase
CWE-416Use After FreeVariant

Data version

5.2

Document digest

b6b9821b8285ca96b7a79314072b822751af9bdd1c347451e7a0de7756c75bb0

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux4df1f2d36bdc9a368650bf14b9097c555e95f71d to < 413e04adcc1fd263cf02b1b83b4a0dbdc66bcee9, 63546395a0e6ac264f78f65218086ce6014b4494 to < 2196f9d3358b00fcb28835a5fde14071f51ecb96, 922f56e9a795d6f3dd72d3428ebdd7ee040fa855 to < 5a2b87dfceccf9065157a14a599d395c2b6281b8, 922f56e9a795d6f3dd72d3428ebdd7ee040fa855 to < 69904608e25e8ba58111aadd9210892cf3876201, 922f56e9a795d6f3dd72d3428ebdd7ee040fa855 to < 72cfcb79026cffb6490f5044153a841d360b0cfc, 922f56e9a795d6f3dd72d3428ebdd7ee040fa855 to < 668e050429c7ca688cf4e7112f97f0cd269d446b, 922f56e9a795d6f3dd72d3428ebdd7ee040fa855 to < c0c6f4ba8a37688f7b4d4044898d88f0450d44c2, 18cead61e437f4c7898acca0a5f3df12f801d97f, 6f5780536181d1d0d09a11a1bc92f22e143447e2, 5.15.105 to < 5.15.222, 6.1.22 to < 6.1.189, 5.10.177 to < 5.11, 6.2.9 to < 6.3, 6.3—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/413e04adcc1fd263cf02b1b83b4a0dbdc66bcee9
git.kernel.orghttps://git.kernel.org/stable/c/2196f9d3358b00fcb28835a5fde14071f51ecb96
git.kernel.orghttps://git.kernel.org/stable/c/5a2b87dfceccf9065157a14a599d395c2b6281b8
git.kernel.orghttps://git.kernel.org/stable/c/69904608e25e8ba58111aadd9210892cf3876201
git.kernel.orghttps://git.kernel.org/stable/c/72cfcb79026cffb6490f5044153a841d360b0cfc
git.kernel.orghttps://git.kernel.org/stable/c/668e050429c7ca688cf4e7112f97f0cd269d446b
git.kernel.orghttps://git.kernel.org/stable/c/c0c6f4ba8a37688f7b4d4044898d88f0450d44c2

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1
linux-6.12
Fixed in 6.12.111-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.111-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.