CVE-2026-68293

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overflow exists in the net/mlx5 component. When a device advertises the mcia 32dwords capability, the MCIA register can return up to 32 dwords (128 bytes). However, the mlx5 ifc mcia reg bits structure only defines 12 dwords (48 bytes). The mlx5 query mcia() function clamps the read size to mlx5 mcia max bytes() and uses memcpy() to move data from the register, which can result in reading past the end of the output buffer. This issue can be triggered when reading the module EEPROM via ethtool.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.