Deadlock Issue in Linux Kernel for Mellanox Network Devices

CVE-2026-43468

What is CVE-2026-43468?

A deadlock issue has been identified in the Linux kernel relevant to Mellanox network devices. This vulnerability arises from an interaction between the devlink lock and the eswitch work queue management. When eswitch-related events are handled, the devlink lock is acquired, which can lead to a stall if the work queue attempts to flush while still processing mode changes. The resolution involves preventing the flushing of the work queue and utilizing a generation counter to prevent outdated handlers from interacting with a modified eswitch. This change ensures that only relevant tasks are executed, enhancing the integrity and stability of network operations. Pending handler work notifications are also effectively disabled to further mitigate the potential for disruption.

References