CVE-2026-45973

A flaw was found in the Linux kernel's RDMA/mlx5 driver. A race condition during firmware reset in Link Aggregation Group (LAG) mode can cause the driver to hang indefinitely while waiting for Unregister Memory Region (UMR) completion during device unload. This can lead to a denial of service, making the affected system unresponsive.

This vulnerability is rated Moderate rather than Important because exploitation is limited to a denial-of-service condition that requires specific hardware and network configurations. In Red Hat Enterprise Linux environments, this issue only impacts systems with Mellanox adapters configured to use Link Aggregation Group (LAG) bonding. The hang is triggered exclusively during teardown routines following a firmware reset, preventing any compromise of system integrity or data confidentiality.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.