CVE-2026-98948
kernel: kernel: mlxsw: Denial of Service via port range register leak in flower template creation
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 23, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel's Mellanox Spectrum switch (mlxsw) driver. This flaw allows a local privileged user to cause a Denial of Service (DoS) by creating network flow classification templates that match port ranges. Because the driver fails to release port range registers allocated during template parsing, these hardware resources leak and become exhausted, preventing subsequent network filtering rules from being configured.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 2.3CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CWE-772 · Missing Release of Resource after Effective Lifetime