CVE-2026-43467

A flaw was found in the Linux kernel's mlx5_core driver. A local user or process can trigger a system crash by attempting to move a network device to switchdev mode when the device does not support IPsec. This occurs because the kernel incorrectly tries to clean up IPsec resources that do not exist, leading to a Denial of Service (DoS).

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because triggering the condition requires local privileges to alter device modes and results solely in a denial of service. The issue specifically manifests when reconfiguring Mellanox network adapters that lack IPsec support into switchdev operational mode. As this mode transition is an administrative operation rather than an automatic network-facing behavior, standard environments remain unaffected unless explicitly managed in this state.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.