CVE-2026-68293

A flaw was found in the net/mlx5 driver of the Linux kernel. When the driver attempts to read the MCIA register from a device advertising the mcia_32dwords capability, the mlx5_query_mcia() function can read more data than the allocated buffer can hold. This leads to a buffer overflow, which can cause a kernel bug and result in a system crash, leading to a Denial of Service (DoS).

This vulnerability is rated as Moderate severity because triggering the issue requires local access and is constrained to systems utilizing Mellanox ConnectX network adapters with the mcia_32dwords capability enabled. Under typical Red Hat Enterprise Linux deployments, an unprivileged or low-privileged user requesting transceiver EEPROM diagnostics via ethtool encounters a FORTIFY_SOURCE assertion, causing a kernel crash rather than arbitrary code execution. Consequently, the operational risk is primarily restricted to a localized denial of service on hosts featuring specific physical network hardware.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.