CVE-2026-64522

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the net/mlx5e component where the mlx5e xfrm add state() function incorrectly handles acquire-flow temporary Security Associations (SAs). When allocating software state and skipping hardware offload setup, the execution path reaches a common success label that unconditionally calls the mlx5 eswitch unblock mode() function. This results in a decrement of the esw->offloads.num block mode variable without a corresponding increment, leading to an eswitch mode block underflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.