CVE-2026-72345
Received Received - Intake

LAG Fix in Linux Kernel Net/mlx5 Single-FDB Error Rollback

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, Fix off-by-one in single-FDB error rollback On failure at index i, the reverse cleanup loop in mlx5_lag_create_single_fdb() starts from i, so the failed index itself is rolled back. That can operate on uninitialized state or double-tear-down a rule the add_one path already self-rolled-back. Start the rollback from i - 1 so only successfully-installed entries are undone.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72345
EUVD
EUVD-2026-59244

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's mlx5 driver, specifically in the LAG (Link Aggregation) functionality. When setting up a single forwarding database (FDB) entry fails at a certain index, the cleanup process incorrectly starts from that failed index. This can lead to operating on uninitialized memory or double-cleaning up rules that were already properly rolled back during the setup process.

Detection Guidance

This vulnerability is specific to the Linux kernel's mlx5 driver and LAG functionality. Detection requires checking kernel logs for errors related to mlx5_lag_create_single_fdb() or single-FDB rollback failures. Monitor logs for messages about off-by-one errors or double tear-downs in the mlx5 driver.

Impact Analysis

This flaw could cause system instability or crashes in the Linux kernel when using mlx5 network interfaces with LAG. It may lead to network connectivity issues or unexpected behavior in systems relying on these network interfaces.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this vulnerability. If immediate patching is not possible, disable the mlx5 LAG feature or restrict its use until the kernel is updated.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72345. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart