{"id":29118,"date":"2026-09-25T20:31:55","date_gmt":"2026-09-25T12:31:55","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-97962"},"modified":"2026-09-25T20:31:55","modified_gmt":"2026-09-25T12:31:55","slug":"cve-2026-97962","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-97962","title":{"rendered":"CVE-2026-97962 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nnet\/mlx5e: Move repre"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>net\/mlx5e: Move representor vnic reporter to eswitch devlink port<\/p>\n<p>The representor vnic devlink health reporter is created and destroyed<br \/>\nalong the representor netdev (un)load path, which is not serialized by<br \/>\nthe devlink instance lock. Destroying the reporter from there triggers<br \/>\na devl_assert_locked() splat on driver unbind:<br \/>\n  WARNING: net\/devlink\/core.c:259 at devl_assert_locked+0x54\/0x70, CPU#2: bash\/3758<br \/>\n  Modules linked in: mlx5_vdpa vringh vdpa mlx5_ib mlx5_fwctl mlx5_core &#8230;<br \/>\n  CPU: 2 UID: 0 PID: 3758 Comm: bash Tainted: G        W           6.19.0+ #1 PREEMPT<br \/>\n  Tainted: [W]=WARN<br \/>\n  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), &#8230;<br \/>\n  RIP: 0010:devl_assert_locked+0x54\/0x70<br \/>\n  Call Trace:<\/p>\n<p>   devl_health_reporter_destroy+0x3a\/0x1b0<br \/>\n   mlx5e_vport_rep_unload+0x12d\/0x2b0 [mlx5_core]<br \/>\n   mlx5_eswitch_unregister_vport_reps+0x1b8\/0x220 [mlx5_core]<br \/>\n   ? __esw_offloads_unload_rep+0x190\/0x190 [mlx5_core]<br \/>\n   ? kernfs_remove_by_name_ns+0xc3\/0xf0<br \/>\n   device_release_driver_internal+0x3b2\/0x560<br \/>\n   unbind_store+0xce\/0xf0<\/p>\n<p>Move the reporter&#8217;s lifecycle to the eswitch devlink port (un)register<br \/>\npaths, which are already serialized by the devlink instance lock, and<br \/>\nstore the handle on mlx5_devlink_port. Use the port&#8217;s mlx5_vport as the<br \/>\nreporter priv since the diagnose callback only needs a device handle and<br \/>\na vport number, and mlx5_vport carries both and is initialized before<br \/>\nany representor driver probes.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>net\/mlx5e: Move representor vnic reporter to eswitch devlink port<\/p>\n<p>The representor vnic devlink health reporter is created and dest<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-29118","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/29118","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=29118"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=29118"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=29118"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}