CVE-2026-74397

IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier

State: Published
Severity: 7.8 High
Published: Aug 15, 2026
Updated: Oct 30, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier

mlx5_ib_alloc_transport_domain() allocates a transport domain and then may fail in mlx5_ib_enable_lb(). In that case, the allocated TD is leaked.

Fix this by deallocating the TD when mlx5_ib_enable_lb() returns an error. Also return 0 explicitly in the no-loopback-capability success branch, and move dev->lb.mutex initialization to mlx5_ib_stage_init_init().

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	146d2f1af3245a10b13eef263687e54f4e253d1d to before 6da717ed8a0703a331295fdd5ad8b7eacec216adAffected 146d2f1af3245a10b13eef263687e54f4e253d1d to before 2c3b2667dad69d56774b79db763acb3a1bee0fc0Affected 146d2f1af3245a10b13eef263687e54f4e253d1d to before 37fc3cc0f924fd8d0f0cf87b92672dec75a32e57Affected 146d2f1af3245a10b13eef263687e54f4e253d1d to before 65e344925fa30abf50c8de8c150b397715fa2066Affected 146d2f1af3245a10b13eef263687e54f4e253d1d to before f88e12c95fc19f719e06ca1e9eb20fdad68ef61aAffected 146d2f1af3245a10b13eef263687e54f4e253d1d to before e79389115b9d27287ff6230a9750675106ed7668Affected
LinuxLinux	4.5Affected before 4.5Not affected 6.1.191 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

146d2f1af3245a10b13eef263687e54f4e253d1d to before 6da717ed8a0703a331295fdd5ad8b7eacec216adAffected
146d2f1af3245a10b13eef263687e54f4e253d1d to before 2c3b2667dad69d56774b79db763acb3a1bee0fc0Affected
146d2f1af3245a10b13eef263687e54f4e253d1d to before 37fc3cc0f924fd8d0f0cf87b92672dec75a32e57Affected
146d2f1af3245a10b13eef263687e54f4e253d1d to before 65e344925fa30abf50c8de8c150b397715fa2066Affected
146d2f1af3245a10b13eef263687e54f4e253d1d to before f88e12c95fc19f719e06ca1e9eb20fdad68ef61aAffected
146d2f1af3245a10b13eef263687e54f4e253d1d to before e79389115b9d27287ff6230a9750675106ed7668Affected

LinuxLinux

4.5Affected
before 4.5Not affected
6.1.191 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.