CVE-2025-21970

A flaw was found in the Linux kernel's mlx5 driver. This vulnerability allows a local user with network administration privileges to cause a Denial of Service (DoS) by crashing the system. When removing a Link Aggregation Group (LAG) interface from a network bridge while an associated physical port is inactive, the driver fails to clean up offloaded network forwarding entries. Subsequent driver background tasks then attempt to access an already destroyed network device structure, resulting in a kernel crash.

This vulnerability is rated as Low severity because exploitation requires local administrative privileges (CAP_NET_ADMIN) along with specialized Mellanox network hardware configured in an uncommon switchdev bonding topology. In typical Red Hat Enterprise Linux deployments, unprivileged users cannot modify bridge configurations or manipulate physical function interfaces. The impact is limited to a local denial of service, with no potential for privilege escalation or loss of confidentiality and integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.