CVE-2025-40350

A flaw was identified in the mlx5e network driver in the Linux kernel relating to handling of multi-buffer XDP operations. The driver historically assumed that the layout of the XDP bufferremained unchanged by XDP programs. When these programs modify the buffer layout, the driver may construct a socket bufferincorrectly,ignoring linear data or mis-pulling fragments,which can lead to an invalid skb or trigger a BUG_ON() in the kernel.

This vulnerability is rated as Moderate impact because exploitation requires a system equipped with Mellanox network adapters running an active multi-buffer XDP program that dynamically alters packet boundaries. Loading and attaching these eBPF programs necessitates elevated administrative privileges (such as CAP_NET_ADMIN), preventing unauthorized local users from establishing the required state. When such programs are active, processing incoming network traffic can result in incorrect socket buffer construction and trigger a kernel panic, limiting the blast radius to a localized denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.