CVE-2026-53230

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.0-rc6

Description A slab-out-of-bounds issue exists in the mlx5 query nic vport mac list() function. The function determines the size of the firmware command buffer based on the Physical Function (PF) log max current uc/mc list capabilities. If a Virtual Function (VF) vport is queried with a larger configured maximum via devlink, the firmware response can overflow the allocated buffer.

Recommendations Update the Linux kernel to version 7.0.0-rc6 or later.