Linux Kernel Vulnerability in MLX5 Tracer Handling

CVE-2026-74717

What is CVE-2026-74717?

A vulnerability exists in the Linux kernel related to the MLX5 driver, where tracer creation can fail, potentially returning NULL or an ERR_PTR value without proper error handling. This oversight leads to system instability, as downstream code treats these return values the same, causing crashes during core dump logic operations. A failure to validate the return value results in a dereference of an invalid pointer, leading to a kernel panic. The resolution involves updating the tracer creation flow to return NULL exclusively on failures, simplifying error checking for callers.

References