CVE-2026-23000

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the mlx5e netdev change profile function. A failure to attach a new profile during a profile change rollback can lead to a dangling netdev with a reset netdev priv. Subsequent attempts to change the profile, such as through switchdev mode changes, can then cause a kernel crash due to accessing a NULL pointer. The issue occurs when the function fails to rollback to the original profile, resulting in an invalid priv pointer. The fix involves handling previous failures and empty priv values within mlx5e netdev change profile, and passing netdev and mdev to all flows requiring the function, avoiding the use of priv.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.