Description
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Update error handler for UCTX and UMEM
In the fast unload flow, the device state is set to internal error,
which indicates that the driver started the destroy process.
In this case, when a destroy command is being executed, it should return
MLX5_CMD_STAT_OK.
Fix MLX5_CMD_OP_DESTROY_UCTX and MLX5_CMD_OP_DESTROY_UMEM to return OK
instead of EIO.
This fixes a call trace in the umem release process -
[ 2633.536695] Call Trace:
[ 2633.537518] ib_uverbs_remove_one+0xc3/0x140 [ib_uverbs]
[ 2633.538596] remove_client_context+0x8b/0xd0 [ib_core]
[ 2633.539641] disable_device+0x8c/0x130 [ib_core]
[ 2633.540615] __ib_unregister_device+0x35/0xa0 [ib_core]
[ 2633.541640] ib_unregister_device+0x21/0x30 [ib_core]
[ 2633.542663] __mlx5_ib_remove+0x38/0x90 [mlx5_ib]
[ 2633.543640] auxiliary_bus_remove+0x1e/0x30 [auxiliary]
[ 2633.544661] device_release_driver_internal+0x103/0x1f0
[ 2633.545679] bus_remove_device+0xf7/0x170
[ 2633.546640] device_del+0x181/0x410
[ 2633.547606] mlx5_rescan_drivers_locked.part.10+0x63/0x160 [mlx5_core]
[ 2633.548777] mlx5_unregister_device+0x27/0x40 [mlx5_core]
[ 2633.549841] mlx5_uninit_one+0x21/0xc0 [mlx5_core]
[ 2633.550864] remove_one+0x69/0xe0 [mlx5_core]
[ 2633.551819] pci_device_remove+0x3b/0xc0
[ 2633.552731] device_release_driver_internal+0x103/0x1f0
[ 2633.553746] unbind_store+0xf6/0x130
[ 2633.554657] kernfs_fop_write+0x116/0x190
[ 2633.555567] vfs_write+0xa5/0x1a0
[ 2633.556407] ksys_write+0x4f/0xb0
[ 2633.557233] do_syscall_64+0x5b/0x1a0
[ 2633.558071] entry_SYSCALL_64_after_hwframe+0x65/0xca
[ 2633.559018] RIP: 0033:0x7f9977132648
[ 2633.559821] Code: 89 02 48 c7 c0 ff ff ff ff eb b3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 8d 05 55 6f 2d 00 8b 00 85 c0 75 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 41 54 49 89 d4 55
[ 2633.562332] RSP: 002b:00007fffb1a83888 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2633.563472] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007f9977132648
[ 2633.564541] RDX: 000000000000000c RSI: 000055b90546e230 RDI: 0000000000000001
[ 2633.565596] RBP: 000055b90546e230 R08: 00007f9977406860 R09: 00007f9977a54740
[ 2633.566653] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99774056e0
[ 2633.567692] R13: 000000000000000c R14: 00007f9977400880 R15: 000000000000000c
[ 2633.568725] ---[ end trace 10b4fe52945e544d ]---
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 5.2 | 5.15.5 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 5.15.5-1 | — |
| Debian 13 | linux | 5.15.5-1 | — |
| Debian 12 | linux | 5.15.5-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux-raspi-realtime | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv +22 | No fix yet | — |
| Ubuntu 20.04 LTS | linux | 5.4.0-200.220 | USN-7088-1 |
| Ubuntu 20.04 LTS | linux-aws | 5.4.0-1135.145 | USN-7088-4 |
| Ubuntu 20.04 LTS | linux-azure | 5.4.0-1140.147 | USN-7088-2 |
| Ubuntu 20.04 LTS | linux-bluefield | 5.4.0-1095.102 | USN-7088-2 |
| Ubuntu 20.04 LTS | linux-gcp | 5.4.0-1139.148 | USN-7088-1 |
| Ubuntu 20.04 LTS | linux-gke +26 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gkeop | 5.4.0-1102.106 | USN-7088-1 |
| Ubuntu 20.04 LTS | linux-ibm | 5.4.0-1082.87 | USN-7088-1 |
| Ubuntu 20.04 LTS | linux-iot | 5.4.0-1044.45 | USN-7119-1 |
| Ubuntu 20.04 LTS | linux-kvm | 5.4.0-1123.131 | USN-7088-4 |
| Ubuntu 20.04 LTS | linux-oracle | 5.4.0-1134.143 | USN-7088-4 |
| Ubuntu 20.04 LTS | linux-raspi | 5.4.0-1119.131 | USN-7088-5 |
| Ubuntu 20.04 LTS | linux-xilinx-zynqmp | 5.4.0-1054.58 | USN-7088-4 |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | 5.4.0-1135.145+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1140.147+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | 5.4.0-1109.119 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | 5.4.0-1139.148+fips1 | — |
| Ubuntu Pro 18.04 LTS | linux-aws-5.4 | 5.4.0-1135.145~18.04.1 | USN-7088-3 |
| Ubuntu Pro 18.04 LTS | linux-azure-5.4 | 5.4.0-1140.147~18.04.1 | USN-7088-4 |
| Ubuntu Pro 18.04 LTS | linux-gcp-5.4 | 5.4.0-1139.148~18.04.1 | USN-7088-1 |
| Ubuntu Pro 18.04 LTS | linux-hwe-5.4 | 5.4.0-200.220~18.04.1 | USN-7088-1 |
| Ubuntu Pro 18.04 LTS | linux-ibm-5.4 | 5.4.0-1082.87~18.04.1 | USN-7088-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle-5.4 | 5.4.0-1134.143~18.04.1 | USN-7088-3 |
| Ubuntu Pro 18.04 LTS | linux-raspi-5.4 | 5.4.0-1119.131~18.04.1 | USN-7088-5 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | kernel-64kb +5 | 5.14.21-150500.55.62.2 | SUSE-SU-2024:1659-1 |
| SLES 15 SP5 | kernel-azure +2 | 5.14.21-150500.33.51.1 | SUSE-SU-2024:1644-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.62.2.150500.6.27.2 | SUSE-SU-2024:1659-1 |
| SLES 15 SP5 | kernel-syms | 5.14.21-150500.55.62.1 | SUSE-SU-2024:1659-1 |
| SLES 15 SP4 | kernel-64kb +6 | 5.14.21-150400.24.119.1 | SUSE-SU-2024:1641-1 |
| SLES 15 SP4 | kernel-default-base | 5.14.21-150400.24.119.1.150400.24.56.1 | SUSE-SU-2024:1641-1 |
| SLES 15 SP3 | kernel-64kb +6 | 5.3.18-150300.59.161.1 | SUSE-SU-2024:1642-1 |
| SLES 15 SP3 | kernel-default-base | 5.3.18-150300.59.161.1.150300.18.94.1 | SUSE-SU-2024:1642-1 |
| SLES 15 SP3 | kernel-docs | 5.3.18-150300.59.161.2 | SUSE-SU-2024:1642-1 |
| SLES 15 SP2 | kernel-default-base | 5.3.18-150200.24.191.1.150200.9.97.1 | SUSE-SU-2024:1650-1 |
| SLES 15 SP2 | kernel-docs +5 | 5.3.18-150200.24.191.1 | SUSE-SU-2024:1650-1 |
| SLES 12 SP5 | kernel-syms +2 | 4.12.14-122.266.1 | SUSE-SU-2025:02334-1 |
Show 20 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP4 | kernel-default-base | 5.14.21-150400.24.119.1.150400.24.56.1 | SUSE-SU-2024:1641-1 |
| SLES for SAP 15 SP4 | kernel-docs +4 | 5.14.21-150400.24.119.1 | SUSE-SU-2024:1641-1 |
| SLES for SAP 15 SP3 | kernel-default-base | 5.3.18-150300.59.161.1.150300.18.94.1 | SUSE-SU-2024:1642-1 |
| SLES for SAP 15 SP3 | kernel-docs | 5.3.18-150300.59.161.2 | SUSE-SU-2024:1642-1 |
| SLES for SAP 15 SP3 | kernel-syms +4 | 5.3.18-150300.59.161.1 | SUSE-SU-2024:1642-1 |
| SLES for SAP 15 SP2 | kernel-default-base | 5.3.18-150200.24.191.1.150200.9.97.1 | SUSE-SU-2024:1650-1 |
| SLES for SAP 15 SP2 | kernel-docs +5 | 5.3.18-150200.24.191.1 | SUSE-SU-2024:1650-1 |
| SLE Micro 5.5 | kernel-default | 5.14.21-150500.55.62.2 | SUSE-SU-2024:1659-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.62.2.150500.6.27.2 | SUSE-SU-2024:1659-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.52.1 | SUSE-SU-2024:1663-1 |
| SLE Micro 5.4 | kernel-default | 5.14.21-150400.24.119.1 | SUSE-SU-2024:1641-1 |
| SLE Micro 5.4 | kernel-default-base | 5.14.21-150400.24.119.1.150400.24.56.1 | SUSE-SU-2024:1641-1 |
| SLE Micro 5.4 | kernel-rt +1 | 5.14.21-150400.15.79.1 | SUSE-SU-2024:1647-1 |
| SLE Micro 5.3 | kernel-default | 5.14.21-150400.24.119.1 | SUSE-SU-2024:1641-1 |
| SLE Micro 5.3 | kernel-default-base | 5.14.21-150400.24.119.1.150400.24.56.1 | SUSE-SU-2024:1641-1 |
| SLE Micro 5.3 | kernel-rt +1 | 5.14.21-150400.15.79.1 | SUSE-SU-2024:1647-1 |
| SLE Micro 5.2 | kernel-default | 5.3.18-150300.59.161.1 | SUSE-SU-2024:1642-1 |
| SLE Micro 5.2 | kernel-default-base | 5.3.18-150300.59.161.1.150300.18.94.1 | SUSE-SU-2024:1642-1 |
| SLE Micro 5.2 | kernel-rt +1 | 5.3.18-150300.169.1 | SUSE-SU-2024:1645-1 |
| SLE Micro 5.1 | kernel-default | 5.3.18-150300.59.161.1 | SUSE-SU-2024:1642-1 |
| SLE Micro 5.1 | kernel-default-base | 5.3.18-150300.59.161.1.150300.18.94.1 | SUSE-SU-2024:1642-1 |
| SLE Micro 5.1 | kernel-rt +1 | 5.3.18-150300.169.1 | SUSE-SU-2024:1645-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.62.2 | SUSE-SU-2024:1659-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5-RT_Update_14 | 1-150500.11.5.1 | SUSE-SU-2024:1663-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_13 | 1-150500.11.3.2 | SUSE-SU-2024:1659-1 |
| SLE Live Patching 15 SP4 | kernel-default | 5.14.21-150400.24.119.1 | SUSE-SU-2024:1641-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_26 | 1-150400.9.3.1 | SUSE-SU-2024:1641-1 |
| SLE Live Patching 15 SP3 | kernel-default | 5.3.18-150300.59.161.1 | SUSE-SU-2024:1642-1 |
| SLE Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_44 | 1-150300.7.3.1 | SUSE-SU-2024:1642-1 |
| SLE Live Patching 15 SP2 | kernel-default | 5.3.18-150200.24.191.1 | SUSE-SU-2024:1650-1 |
| SLE Live Patching 15 SP2 | kernel-livepatch-SLE15-SP2_Update_48 | 1-150200.5.3.1 | SUSE-SU-2024:1650-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.266.1 | SUSE-SU-2025:02334-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_70 | 1-8.5.1 | SUSE-SU-2025:02334-1 |
| SLE HPC 15 SP4 | kernel-64kb +5 | 5.14.21-150400.24.119.1 | SUSE-SU-2024:1641-1 |
| SLE HPC 15 SP4 | kernel-default-base | 5.14.21-150400.24.119.1.150400.24.56.1 | SUSE-SU-2024:1641-1 |
| SLE HPC 15 SP3 | kernel-64kb +5 | 5.3.18-150300.59.161.1 | SUSE-SU-2024:1642-1 |
| SLE HPC 15 SP3 | kernel-default-base | 5.3.18-150300.59.161.1.150300.18.94.1 | SUSE-SU-2024:1642-1 |
| SLE HPC 15 SP3 | kernel-docs | 5.3.18-150300.59.161.2 | SUSE-SU-2024:1642-1 |
| SLE HPC 15 SP2 | kernel-default-base | 5.3.18-150200.24.191.1.150200.9.97.1 | SUSE-SU-2024:1650-1 |
| SLE HPC 15 SP2 | kernel-docs +5 | 5.3.18-150200.24.191.1 | SUSE-SU-2024:1650-1 |
| SUSE Real Time Module 15 SP5 | kernel-rt +3 | 5.14.21-150500.13.52.1 | SUSE-SU-2024:1663-1 |
| SUSE Manager Server 4.3 | kernel-default-base | 5.14.21-150400.24.119.1.150400.24.56.1 | SUSE-SU-2024:1641-1 |
| SUSE Manager Server 4.3 | kernel-syms +3 | 5.14.21-150400.24.119.1 | SUSE-SU-2024:1641-1 |
| SUSE Manager Proxy 4.3 | kernel-default-base | 5.14.21-150400.24.119.1.150400.24.56.1 | SUSE-SU-2024:1641-1 |
| SUSE Manager Proxy 4.3 | kernel-syms +2 | 5.14.21-150400.24.119.1 | SUSE-SU-2024:1641-1 |
| SUSE Enterprise Storage 7.1 | kernel-64kb +5 | 5.3.18-150300.59.161.1 | SUSE-SU-2024:1642-1 |
| SUSE Enterprise Storage 7.1 | kernel-default-base | 5.3.18-150300.59.161.1.150300.18.94.1 | SUSE-SU-2024:1642-1 |
| SUSE Enterprise Storage 7.1 | kernel-docs | 5.3.18-150300.59.161.2 | SUSE-SU-2024:1642-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.5 | dtb-aarch64 +2 | 5.14.21-150500.55.62.1 | SUSE-SU-2024:1659-1 |
| openSUSE Leap 15.5 | kernel-64kb +7 | 5.14.21-150500.55.62.2 | SUSE-SU-2024:1659-1 |
| openSUSE Leap 15.5 | kernel-azure +2 | 5.14.21-150500.33.51.1 | SUSE-SU-2024:1644-1 |
| openSUSE Leap 15.5 | kernel-default-base | 5.14.21-150500.55.62.2.150500.6.27.2 | SUSE-SU-2024:1659-1 |
| openSUSE Leap 15.5 | kernel-rt +3 | 5.14.21-150500.13.52.1 | SUSE-SU-2024:1663-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.4 | kernel-default | 5.14.21-150400.24.119.1 | SUSE-SU-2024:1641-1 |
| openSUSE Leap Micro 5.4 | kernel-default-base | 5.14.21-150400.24.119.1.150400.24.56.1 | SUSE-SU-2024:1641-1 |
| openSUSE Leap Micro 5.4 | kernel-rt | 5.14.21-150400.15.79.1 | SUSE-SU-2024:1647-1 |
| openSUSE Leap Micro 5.3 | kernel-default | 5.14.21-150400.24.119.1 | SUSE-SU-2024:1641-1 |
| openSUSE Leap Micro 5.3 | kernel-default-base | 5.14.21-150400.24.119.1.150400.24.56.1 | SUSE-SU-2024:1641-1 |
| openSUSE Leap Micro 5.3 | kernel-rt | 5.14.21-150400.15.79.1 | SUSE-SU-2024:1647-1 |
Advisories 16
- USN-7088-1 linux, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7088-4 linux-aws, linux-azure-5.4, linux-kvm, linux-oracle, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7088-5 linux-raspi, linux-raspi-5.4 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7088-3 linux-aws-5.4, linux-oracle-5.4 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7088-2 linux-azure, linux-bluefield vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7119-1 linux-iot vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- WID-SEC-2024-0851 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 12, 2026
- SUSE-SU-2025:02334-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2024:1663-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1645-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1647-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1650-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1641-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1642-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1644-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-SU-2024:1659-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · May 2, 2025