CVE-2026-72343

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the net/mlx5e driver where a zero-sized buffer is allocated during the creation of HV VHCA stats. When mlx5e hv vhca stats create() is called before mlx5e open(), the priv->stats nch variable is zero, causing mlx5e hv vhca stats buf size() to return 0. Consequently, kvzalloc() returns a ZERO SIZE PTR instead of NULL, bypassing the safety guard. Later, when channels are opened and stats reporting is enabled, mlx5e hv vhca stats work() attempts to perform a memset() operation on this ZERO SIZE PTR using a non-zero length, leading to a system fault at address 0x10. The issue involves the following components:

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.