Review reviewCritical

CVE-2026-64122

Linux

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover mlx5e_tx_reporter_timeout_recover() accesses sq->netdev after mlx5e_safe_reopen_channels() has torn down and freed the channel (and its embedded SQs). Replace the three sq->netdev references with priv->netdev which is safe because priv outlives channel teardown. The netdev_err() call already used priv->netdev for this reason; make the trylock/unlock and health_channel_eq_recover calls consistent. This fixes the following KASAN splat: BUG: KASAN: use-after-fr...

CVSS: 9.8
EPSS: -
CISA KEV: Not listed
Published: 2026.07.20

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 9.8

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= 4329514c61abefe4961541b128c549b017bab5ad < 1604a2d68414aa4cc34faac0b7faa9c14455e8d3, >= 83ac0304a2d77519dae1e54c9713cbe1aedf19c9 < 152295aa7dc2c5e046606f7dadc84fce41136446, >= 83ac0304a2d77519dae1e54c9713cbe1aedf19c9 < 7d260c5d2d89eb2c8c528d54b576b3aae3e20231, >= 63f9d5fb4d8040077df801ca3270e2f02d55e0d9, >= 6.18.14 < 6.18.34, >= 6.19.4 < 6.20, >= 7.0
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE: Not available