Linux Kernel Vulnerability in Mellanox mlx5 Driver

CVE-2026-43465

What is CVE-2026-43465?

A vulnerability in the Mellanox mlx5 driver of the Linux kernel occurs when XDP multi-buf programs manipulate the buffer layout during execution, leading to dropped fragments that are not properly counted. This causes negative reference counting errors and can affect system stability. The issue was revealed during self-testing with a lack of payload in packet transfers, resulting in warnings and potential system crashes. An appropriate patch has since been applied to rectify the frag counting mechanism.

References