{"id":6973,"date":"2026-09-04T18:49:22","date_gmt":"2026-09-04T10:49:22","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-72344"},"modified":"2026-09-04T18:49:22","modified_gmt":"2026-09-04T10:49:22","slug":"cve-2026-72344","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-72344","title":{"rendered":"CVE-2026-72344 [HIGH] &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nnet\/mlx5e: TC, skip p"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>net\/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable<\/p>\n<p>mlx5_lag_get_dev_seq() will return error when the peer isn&#8217;t in the LAG<br \/>\nor when no device is marked as master. Result bad memory access and kernel<br \/>\ncrash[1].<\/p>\n<p>Hence, skip the peer when lookup fails.<\/p>\n<p>Note: In case there are peer flows, they are cleaned before LAG cleared<br \/>\nthe master mark.<\/p>\n<p>[1]<br \/>\nRIP: 0010:mlx5e_tc_del_fdb_peers_flow+0x3d\/0x350 [mlx5_core]<br \/>\nCall Trace:<\/p>\n<p> mlx5e_tc_clean_fdb_peer_flows+0xc1\/0x130 [mlx5_core]<br \/>\n mlx5_esw_offloads_unpair+0x3a\/0x400 [mlx5_core]<br \/>\n mlx5_esw_offloads_devcom_event+0xee\/0x360 [mlx5_core]<br \/>\n mlx5_devcom_send_event+0x7a\/0x140 [mlx5_core]<br \/>\n mlx5_esw_offloads_devcom_cleanup+0x2f\/0x90 [mlx5_core]<br \/>\n mlx5e_tc_esw_cleanup+0x28\/0xf0 [mlx5_core]<br \/>\n mlx5e_rep_tc_cleanup+0x19\/0x30 [mlx5_core]<br \/>\n mlx5e_cleanup_uplink_rep_tx+0x36\/0x40 [mlx5_core]<br \/>\n mlx5e_cleanup_rep_tx+0x55\/0x60 [mlx5_core]<br \/>\n mlx5e_detach_netdev+0x96\/0xf0 [mlx5_core]<br \/>\n mlx5e_netdev_change_profile+0x5b\/0x120 [mlx5_core]<br \/>\n mlx5e_netdev_attach_nic_profile+0x1b\/0x30 [mlx5_core]<br \/>\n mlx5e_vport_rep_unload+0xdd\/0x110 [mlx5_core]<br \/>\n __esw_offloads_unload_rep+0x81\/0xb0 [mlx5_core]<br \/>\n mlx5_eswitch_unregister_vport_reps+0x1d7\/0x220 [mlx5_core]<br \/>\n mlx5e_rep_remove+0x22\/0x30 [mlx5_core]<br \/>\n device_release_driver_internal+0x194\/0x1f0<br \/>\n bus_remove_device+0xe8\/0x1b0<br \/>\n device_del+0x159\/0x3c0<br \/>\n mlx5_rescan_drivers_locked+0xbc\/0x2d0 [mlx5_core]<br \/>\n mlx5_unregister_device+0x54\/0x80 [mlx5_core]<br \/>\n mlx5_uninit_one+0x73\/0x130 [mlx5_core]<br \/>\n remove_one+0x78\/0xe0 [mlx5_core]<br \/>\n pci_device_remove+0x39\/0xa0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>net\/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable<\/p>\n<p>mlx5_lag_get_dev_seq() will return error when the peer isn&#8217;t in <\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-6973","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/6973","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6973"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6973"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6973"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}