Description
In the Linux kernel, the following vulnerability has been resolved:
mlxbf_gige: stop interface during shutdown
The mlxbf_gige driver intermittantly encounters a NULL pointer
exception while the system is shutting down via "reboot" command.
The mlxbf_driver will experience an exception right after executing
its shutdown() method. One example of this exception is:
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000070
Mem abort info:
ESR = 0x0000000096000004
EC = 0x25: DABT (current EL), IL = 32 bits
SET = 0, FnV = 0
EA = 0, S1PTW = 0
FSC = 0x04: level 0 translation fault
Data abort info:
ISV = 0, ISS = 0x00000004
CM = 0, WnR = 0
user pgtable: 4k pages, 48-bit VAs, pgdp=000000011d373000
[0000000000000070] pgd=0000000000000000, p4d=0000000000000000
Internal error: Oops: 96000004 [#1] SMP
CPU: 0 PID: 13 Comm: ksoftirqd/0 Tainted: G S OE 5.15.0-bf.6.gef6992a #1
Hardware name: https://www.mellanox.com BlueField SoC/BlueField SoC, BIOS 4.0.2.12669 Apr 21 2023
pstate: 20400009 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : mlxbf_gige_handle_tx_complete+0xc8/0x170 [mlxbf_gige]
lr : mlxbf_gige_poll+0x54/0x160 [mlxbf_gige]
sp : ffff8000080d3c10
x29: ffff8000080d3c10 x28: ffffcce72cbb7000 x27: ffff8000080d3d58
x26: ffff0000814e7340 x25: ffff331cd1a05000 x24: ffffcce72c4ea008
x23: ffff0000814e4b40 x22: ffff0000814e4d10 x21: ffff0000814e4128
x20: 0000000000000000 x19: ffff0000814e4a80 x18: ffffffffffffffff
x17: 000000000000001c x16: ffffcce72b4553f4 x15: ffff80008805b8a7
x14: 0000000000000000 x13: 0000000000000030 x12: 0101010101010101
x11: 7f7f7f7f7f7f7f7f x10: c2ac898b17576267 x9 : ffffcce720fa5404
x8 : ffff000080812138 x7 : 0000000000002e9a x6 : 0000000000000080
x5 : ffff00008de3b000 x4 : 0000000000000000 x3 : 0000000000000001
x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
mlxbf_gige_handle_tx_complete+0xc8/0x170 [mlxbf_gige]
mlxbf_gige_poll+0x54/0x160 [mlxbf_gige]
__napi_poll+0x40/0x1c8
net_rx_action+0x314/0x3a0
__do_softirq+0x128/0x334
run_ksoftirqd+0x54/0x6c
smpboot_thread_fn+0x14c/0x190
kthread+0x10c/0x110
ret_from_fork+0x10/0x20
Code: 8b070000 f9000ea0 f95056c0 f86178a1 (b9407002)
---[ end trace 7cc3941aa0d8e6a4 ]---
Kernel panic - not syncing: Oops: Fatal exception in interrupt
Kernel Offset: 0x4ce722520000 from 0xffff800008000000
PHYS_OFFSET: 0x80000000
CPU features: 0x000005c1,a3330e5a
Memory Limit: none
---[ end Kernel panic - not syncing: Oops: Fatal exception in interrupt ]---
During system shutdown, the mlxbf_gige driver's shutdown() is always executed.
However, the driver's stop() method will only execute if networking interface
configuration logic within the Linux distribution has been setup to do so.
If shutdown() executes but stop() does not execute, NAPI remains enabled
and this can lead to an exception if NAPI is scheduled while the hardware
interface has only been partially deinitialized.
The networking interface managed by the mlxbf_gige driver must be properly
stopped during system shutdown so that IFF_UP is cleared, the hardware
interface is put into a clean state, and NAPI is fully deinitialized.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 5.14 | 5.15.154 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.8.9-1 | — |
| Debian 13 | linux | 6.8.9-1 | — |
| Debian 12 | linux | 6.1.85-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1040.42 | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-38.38 | USN-6893-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1011.12 | USN-6893-3 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1010.10 | USN-6893-1 |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1010.11 | USN-6893-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1006.9 | USN-6893-2 |
| Ubuntu 24.04 LTS | linux-ibm +2 | 6.8.0-1008.8 | USN-6918-1, USN-6893-1 |
| Ubuntu 24.04 LTS | linux-intel | 6.8.0-1007.14 | USN-6893-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1009.9 | USN-6893-2 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1007.7 | USN-6893-1 |
| Ubuntu 24.04 LTS | linux-riscv +1 | 6.8.0-38.38.1 | USN-6893-1 |
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-116.126 | USN-6898-2, USN-6898-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1065.71 | USN-6898-3 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1011.12~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1068.77 | USN-6917-1 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1010.10~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1068.77.1 | USN-6917-1 |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1064.72 | USN-6898-1 |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1062.68 | USN-6898-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1048.55 | USN-6898-1 |
| Ubuntu 22.04 LTS | linux-ibm +1 | 5.15.0-1058.61 | USN-6919-1, USN-6898-1 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1060.66 | USN-6898-1 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1062.67 | USN-6898-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1060.61 | USN-6898-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1009.9~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1026.26 | — |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1015.15 | — |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1063.69 | USN-6898-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1008.8~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-riscv +31 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1035.39 | USN-7019-1 |
| Ubuntu 20.04 LTS | linux-aws-5.15 | 5.15.0-1065.71~20.04.1 | USN-6898-4 |
| Ubuntu 20.04 LTS | linux-azure-5.15 | 5.15.0-1068.77~20.04.1 | USN-6917-1 |
| Ubuntu 20.04 LTS | linux-azure-fde-5.15 | 5.15.0-1068.77~20.04.1.1 | USN-6917-1 |
| Ubuntu 20.04 LTS | linux-gcp-5.15 | 5.15.0-1065.73~20.04.1 | USN-6927-1 |
| Ubuntu 20.04 LTS | linux-gke +27 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gkeop-5.15 | 5.15.0-1048.55~20.04.1 | USN-6898-1 |
| Ubuntu 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-116.126~20.04.1 | USN-6898-3, USN-6898-2 |
| Ubuntu 20.04 LTS | linux-ibm-5.15 | 5.15.0-1058.61~20.04.1 | USN-6898-2 |
| Ubuntu 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1060.66~20.04.1 | USN-6898-1 |
| Ubuntu 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1027.27~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-oracle-5.15 | 5.15.0-1063.69~20.04.1 | USN-6898-2 |
| Ubuntu 20.04 LTS | linux-riscv-5.15 | 5.15.0-1061.65~20.04.1 | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2006.6 | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1004.4 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1058.60 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1066.74 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1065.71+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1068.77+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-115.125+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1064.72+fips1 | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux-bluefield | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | bpftool | 7.3.0-427.28.1.el9_4 | RHSA-2024:4928 |
| RHEL 9 | rv +64 | 5.14.0-427.28.1.el9_4 | RHSA-2024:4928 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.2 EUS | bpftool | 7.0.0-284.77.1.el9_2 | RHSA-2024:5066 |
| RHEL 9.2 EUS | kernel-rt +14 | 5.14.0-284.77.1.rt14.362.el9_2 | RHSA-2024:5067 |
| RHEL 9.2 EUS | perf +47 | 5.14.0-284.77.1.el9_2 | RHSA-2024:5066 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | bpftool | 7.3.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux 9 | rv +60 | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | kernel | 5.14.0-427.28.1.el9_4 | RXSA-2024:4928, RLSA-2024:4928 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | kernel-64kb +3 | 6.4.0-150600.23.7.3 | SUSE-SU-2024:2203-1 |
| SLES 15 SP6 | kernel-azure +1 | 6.4.0-150600.8.5.4 | SUSE-SU-2024:2135-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.7.3.150600.12.2.7 | SUSE-SU-2024:2203-1 |
| SLES 15 SP6 | kernel-docs | 6.4.0-150600.23.7.4 | SUSE-SU-2024:2203-1 |
| SLES 15 SP6 | kernel-source | 6.4.0-150600.23.7.2 | SUSE-SU-2024:2203-1 |
| SLES 15 SP6 | kernel-syms | 6.4.0-150600.23.7.1 | SUSE-SU-2024:2203-1 |
| SLES 15 SP6 | kernel-syms-azure | 6.4.0-150600.8.5.1 | SUSE-SU-2024:2135-1 |
| SLES 15 SP5 | kernel-64kb +6 | 5.14.21-150500.55.68.1 | SUSE-SU-2024:2190-1 |
| SLES 15 SP5 | kernel-azure +2 | 5.14.21-150500.33.57.1 | SUSE-SU-2024:2019-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.68.1.150500.6.31.1 | SUSE-SU-2024:2190-1 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_5 | 1-1.1 | SUSE-SU-2025:20249-1 |
| SLE Micro 6.1 | kernel-rt +1 | 6.4.0-25.1 | SUSE-SU-2025:20249-1 |
| SLE Micro 6.0 | kernel-default-base | 6.4.0-17.1.1.51 | SUSE-SU-2025:20008-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_5 | 1-1.1 | SUSE-SU-2025:20166-1 |
| SLE Micro 6.0 | kernel-rt +1 | 6.4.0-9.1 | SUSE-SU-2025:20166-1, SUSE-SU-2025:20028-1 |
| SLE Micro 6.0 | kernel-source +2 | 6.4.0-18.1 | SUSE-SU-2025:20008-1 |
| SLE Micro 5.5 | kernel-default | 5.14.21-150500.55.68.1 | SUSE-SU-2024:2190-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.68.1.150500.6.31.1 | SUSE-SU-2024:2190-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.58.1 | SUSE-SU-2024:2008-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.7.3 | SUSE-SU-2024:2203-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_1 | 1-150600.1.5.1 | SUSE-SU-2024:2973-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_1 | 1-150600.13.3.7 | SUSE-SU-2024:2203-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.68.1 | SUSE-SU-2024:2190-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_15 +1 | 1-150500.11.3.1 | SUSE-SU-2024:2190-1, SUSE-SU-2024:2008-1 |
| SUSE Real Time Module 15 SP6 | kernel-rt +3 | 6.4.0-150600.10.5.1 | SUSE-SU-2024:2973-1 |
| SUSE Real Time Module 15 SP5 | kernel-rt +3 | 5.14.21-150500.13.58.1 | SUSE-SU-2024:2008-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.6 | dtb-aarch64 +2 | 6.4.0-150600.23.7.1 | SUSE-SU-2024:2203-1 |
| openSUSE Leap 15.6 | kernel-64kb +5 | 6.4.0-150600.23.7.3 | SUSE-SU-2024:2203-1 |
| openSUSE Leap 15.6 | kernel-azure +1 | 6.4.0-150600.8.5.4 | SUSE-SU-2024:2135-1 |
| openSUSE Leap 15.6 | kernel-default-base | 6.4.0-150600.23.7.3.150600.12.2.7 | SUSE-SU-2024:2203-1 |
| openSUSE Leap 15.6 | kernel-docs | 6.4.0-150600.23.7.4 | SUSE-SU-2024:2203-1 |
| openSUSE Leap 15.6 | kernel-rt +3 | 6.4.0-150600.10.5.1 | SUSE-SU-2024:2973-1 |
| openSUSE Leap 15.6 | kernel-source | 6.4.0-150600.23.7.2 | SUSE-SU-2024:2203-1 |
| openSUSE Leap 15.6 | kernel-syms-azure | 6.4.0-150600.8.5.1 | SUSE-SU-2024:2135-1 |
| openSUSE Leap 15.5 | dtb-aarch64 +10 | 5.14.21-150500.55.68.1 | SUSE-SU-2024:2190-1 |
| openSUSE Leap 15.5 | kernel-azure +2 | 5.14.21-150500.33.57.1 | SUSE-SU-2024:2019-1 |
| openSUSE Leap 15.5 | kernel-default-base | 5.14.21-150500.55.68.1.150500.6.31.1 | SUSE-SU-2024:2190-1 |
| openSUSE Leap 15.5 | kernel-rt +3 | 5.14.21-150500.13.58.1 | SUSE-SU-2024:2008-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | bpftool | 7.3.0-427.28.1.el9_4 | ELSA-2024-4928 |
| Oracle Linux 9 | rv +27 | 5.14.0-427.28.1.el9_4 | ELSA-2024-4928 |
Advisories 31
- WID-SEC-2024-1188 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Nov 9, 2026
- ALSA-2024:4928 Moderate: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- USN-6919-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
- USN-7019-1 linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-6917-1 linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-6927-1 linux-gcp-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-6898-1 linux, linux-gcp, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-ibm, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-nvidia, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6893-1 linux, linux-azure, linux-gcp, linux-ibm, linux-intel, linux-lowlatency, linux-oem-6.8, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6898-2 linux-ibm-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6898-3 linux-aws, linux-hwe-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6898-4 linux-aws-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6893-2 linux-gke, linux-nvidia vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6893-3 linux-aws vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6918-1 linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- RHSA-2024:5067 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2024:5066 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2024:4928 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 20, 2026
- SUSE-SU-2025:20166-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20008-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20028-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20249-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- WID-SEC-2024-1913 Red Hat OpenShift Container Platform: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 3, 2026
- RLSA-2024:4928 Moderate: kernel security update Rocky Linux Security Advisories · Feb 5, 2026
- RXSA-2024:4928 Moderate: kernel security update Rocky Linux Security Advisories · Feb 5, 2026
- SUSE-SU-2024:2973-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2019-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2190-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2008-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2135-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2203-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · May 2, 2025
- ELSA-2024-4928 Moderate: kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jul 31, 2024
References
- https://git.kernel.org/stable/c/63a10b530e22cc923008b5925821c26872f37971
- https://git.kernel.org/stable/c/80247e0eca14ff177d565f58ecd3010f6b7910a4
- https://git.kernel.org/stable/c/36a1cb0371aa6f0698910ee70cb4ed3c349f4fa4
- https://git.kernel.org/stable/c/9783b3b0e71d704949214a8f76468f591a31f3f5
- https://git.kernel.org/stable/c/09ba28e1cd3cf715daab1fca6e1623e22fd754a6