CVE-2026-72341

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A publication race exists in the net/mlx5e module. The function mlx5e channel stats alloc() updates the priv->channel stats[] array and increments the priv->stats nch variable without using memory barriers. On weakly-ordered architectures such as ARM, PowerPC, and RISC-V, these writes may become visible to other CPUs out of order. This allows a concurrent reader to observe an updated priv->stats nch value while the corresponding entry in priv->channel stats[] is still NULL, resulting in a NULL pointer dereference. This issue has been observed in production on BlueField-3 DPUs (arm64) when ovs-vswitchd queries network device statistics during NIC bringup, racing with mlx5e open channel() and mlx5e channel stats alloc() on another CPU.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.