Description
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context
Indirection (*) is of lower precedence than postfix increment (++). Logic
in napi_poll context would cause an out-of-bound read by first increment
the pointer address by byte address space and then dereference the value.
Rather, the intended logic was to dereference first and then increment the
underlying value.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 6.6.3 – < 6.6.15, 6.5.13 – < 6.6, 6.7 | 6.6.15 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.6.15-1 | — |
| Debian 13 | linux | 6.6.15-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | linux-azure-6.5 | 6.5.0-1022.23~22.04.1 | USN-6819-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.5 | 6.5.0-1022.24~22.04.1 | USN-6818-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.5 | 6.5.0-41.41~22.04.2 | USN-6818-4 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.5 | 6.5.0-41.41.1~22.04.1 | USN-6818-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.5 | 6.5.0-1021.22 | USN-6818-3 |
| Ubuntu 22.04 LTS | linux-oem-6.5 | 6.5.0-1024.25 | USN-6819-3 |
| Ubuntu 22.04 LTS | linux-oracle-6.5 | 6.5.0-1024.24~22.04.1 | USN-6819-4 |
| Ubuntu 22.04 LTS | linux-riscv +23 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.5 | 6.5.0-40.40.1~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-starfive-6.5 | 6.5.0-1015.16~22.04.1 | USN-6819-1 |
| Ubuntu 20.04 LTS | linux-gke +26 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +13 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2001.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | bpftool | 7.3.0-427.24.1.el9_4 | RHSA-2024:4349 |
| RHEL 9 | rv +64 | 5.14.0-427.24.1.el9_4 | RHSA-2024:4349 |
| RHEL 8 | kernel-rt +12 | 4.18.0-553.8.1.rt7.349.el8_10 | RHSA-2024:4352 |
| RHEL 8 | perf +26 | 4.18.0-553.8.1.el8_10 | RHSA-2024:4211 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | bpftool | 7.3.0-427.24.1.el9_4 | ALSA-2024:4349 |
| AlmaLinux 9 | rv +60 | 5.14.0-427.24.1.el9_4 | ALSA-2024:4349 |
| AlmaLinux 8 | kernel-rt +11 | 4.18.0-553.8.1.rt7.349.el8_10 | ALSA-2024:4352 |
| AlmaLinux 8 | perf +24 | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | kernel | 5.14.0-427.24.1.el9_4 | RXSA-2024:4349, RLSA-2024:4349 |
| Rocky Linux 8 | kernel | 4.18.0-553.8.1.el8_10 | RLSA-2024:4211 |
| Rocky Linux 8 | kernel-rt | 4.18.0-553.8.1.rt7.349.el8_10 | RLSA-2024:4352 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | bpftool | 7.3.0-427.24.1.el9_4 | ELSA-2024-4349 |
| Oracle Linux 9 | rv +27 | 5.14.0-427.24.1.el9_4 | ELSA-2024-4349 |
| Oracle Linux 8 | kernel-uek +12 | 5.15.0-300.163.18.el9uek | ELSA-2024-12682 |
| Oracle Linux 8 | perf +19 | 4.18.0-553.8.1.el8_10 | ELSA-2024-12682, ELSA-2024-4211 |
Advisories 21
- USN-6819-4 linux-oracle-6.5 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-6818-3 linux-nvidia-6.5 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-6819-3 linux-oem-6.5 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-6818-1 linux, linux-gcp, linux-gcp-6.5, linux-lowlatency, linux-lowlatency-hwe-6.5, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-6818-4 linux-hwe-6.5 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-6819-1 linux-azure, linux-azure-6.5, linux-starfive, linux-starfive-6.5 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- ALSA-2024:4349 Moderate: kernel security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:4211 Important: kernel security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:4352 Important: kernel-rt security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:4352 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2024:4211 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2024:4349 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Aug 19, 2026
- WID-SEC-2024-0722 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 15, 2026
- RLSA-2024:4352 Important: kernel-rt security and bug fix update Rocky Linux Security Advisories · Feb 4, 2026
- RXSA-2024:4349 Moderate: kernel security and bug fix update Rocky Linux Security Advisories · Feb 4, 2026
- RLSA-2024:4349 Moderate: kernel security and bug fix update Rocky Linux Security Advisories · Feb 4, 2026
- RLSA-2024:4211 Important: kernel security and bug fix update Rocky Linux Security Advisories · Feb 4, 2026
- WID-SEC-2024-1905 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 3, 2025
- ELSA-2024-12682 Important: Unbreakable Enterprise kernel security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Sep 23, 2024
- ELSA-2024-4349 Moderate: kernel security and bug fix update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jul 8, 2024
- ELSA-2024-4211 Important: kernel security and bug fix update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jul 2, 2024