CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и след действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA mlx5e_xfrm_add_state() handles acquire-flow temporary SAs by allocating software state and skipping hardware offload setup. That path jumps to the common success label before taking the eswitch mode block. After tunnel-mode validation was moved earlier, the common success label unconditionally calls mlx5_eswitch_unblock_mode(). For acquire SAs, this decrements esw->offloads.num_block_mode without a matching increment. Return directly after installing the acquire SA offload handle, so only the paths that successfully called mlx5_eswitch_block_mode() call the matching unblock.
Засегнати продукти
- Linux Linux: 22239eb258bc1e6ccdb2d3502fce1cc2b2a88386 преди b5bd4249e430f5963d559708ee96a671716d2400; 22239eb258bc1e6ccdb2d3502fce1cc2b2a88386 преди ecafd8284e527666e83261e6e57a7c7341d591cb; 22239eb258bc1e6ccdb2d3502fce1cc2b2a88386 преди abe003b33223ff33552f291644bf35d9c2f992fb; 993c4ba71596c30418ba5a0ddcf4f9c2f431466a; 6.17.4 преди 6.18
- Linux Linux: 6.18; преди 6.18; 6.18.34 до 6.18.*; 7.0.11 до 7.0.*; от 7.1 нататък
Вид слабост
История
- 25 юли 2026 Публикувано
Други уязвимости в Linux Linux
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-64522
- https://nvd.nist.gov/vuln/detail/CVE-2026-64522
- https://git.kernel.org/stable/c/b5bd4249e430f5963d559708ee96a671716d2400
- https://git.kernel.org/stable/c/ecafd8284e527666e83261e6e57a7c7341d591cb
- https://git.kernel.org/stable/c/abe003b33223ff33552f291644bf35d9c2f992fb