Threats tagged 'ghsa-m5q5-9mr9-g93x'

CVE-2025-21970 is a medium severity vulnerability in the Linux kernel's mlx5 network driver related to bridge handling of Link Aggregation Group (LAG) state checks. The flaw causes a kernel crash when removing a LAG device from a bridge due to improper handling of offloaded entries and stale bridge forwarding database (FDB) entries. This leads to a use-after-free scenario where the kernel attempts to access a destroyed network device, resulting in a crash (denial of service).