CVE-2025-68790 — Signal Handler Race Condition in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 92.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 13
Description
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix double unregister of HCA_PORTS component
Clear hca_devcom_comp in device's private data after unregistering it in
LAG teardown. Otherwise a slightly lagging second pass through
mlx5_unload_one() might try to unregister it again and trip over
use-after-free.
On s390 almost all PCI level recovery events trigger two passes through
mxl5_unload_one() - one through the poll_health() method and one through
mlx5_pci_err…
Affected Packages3 packages
▶CVEListV5linux/linux5a977b5833b7a261bfa6094595ffa73c1071588c — d2495f529d60e8e8c43e6ad524089c38b8be7bc4+2
🔴Vulnerability Details
3GHSA▶
GHSA-r4v9-6rcf-whc8: In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix double unregister of HCA_PORTS component
Clear hca_devcom_comp in↗2026-01-13
OSV▶
CVE-2025-68790: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix double unregister of HCA_PORTS component Clear hca_devcom_comp in de↗2026-01-13