Linux Kernel Vulnerability in mlx5: LAG Device Debugging Flaw

CVE-2026-43013

What is CVE-2026-43013?

A logic error in the Linux kernel’s networking component, specifically within the mlx5 driver for LAG devices, allows for the creation of debugfs entries even when valid LAG context is not established. This oversight can lead to scenarios where NULL pointer dereferences occur if certain attributes are accessed without a valid context. A fix has been implemented to ensure a proper check is in place before these debugfs entries are created, enhancing system integrity and reliability.

References