Threats tagged 'ghsa-w9xj-xj3x-qgjh'

CVE-2026-43013 is a medium severity vulnerability in the Linux kernel's mlx5 network driver related to Link Aggregation Group (LAG) device handling. The flaw occurs because the driver may proceed to create debugfs entries without verifying the presence of a valid LAG device context, leading to potential NULL pointer dereferences. This happens when __mlx5_lag_dev_add_mdev() returns success despite an error, causing mlx5_ldev_add_debugfs() to create debugfs interfaces that rely on a valid device pointer that may be NULL.