CVE-2026-74717

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.19.7

Description An issue exists in the net/mlx5 component where tracer creation can return either NULL or ERR PTR upon failure. Because the return value is stored without proper validation, the system treats both values identically. This leads to a kernel crash in the core dump logic, specifically within the mlx5 fw tracer trigger core dump general() function, which fails to check for ERR PTR and subsequently dereferences it, resulting in a fatal exception and kernel panic.

Recommendations Update Linux kernel version 6.19.7 to a version where tracer creation is modified to return only NULL on failure.