Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43013

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG device before creating debugfs __mlx5_lag_dev_add_mdev() may return 0 (success) even when an error occurs that is handled gracefully. Consequently, the initialization flow proceeds to call mlx5_ldev_add_debugfs() even when there is no valid LAG context. mlx5_ldev_add_debugfs() blindly created the debugfs directory and attributes. This exposed interfaces (like the members file) that rely on a valid
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:359f8e0fa428291f8aa26bc2a754b312a253fd6ca839abf5cec209838d5e1786
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/ethernet/mellanox/mlx5/core/lag/debugfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a3db46d5f4df92630a96f7bc77b60e75c2353e06","status":"affected","version":"7f46a0b7327ae261f9981888708dbca22c283900","versionType":"git"},{"lessThan":"7129632cab3e4d23510b21930aa73b8d97a859f5","status":"affected","version":"7f46a0b7327ae261f9981888708dbca22c283900","versionType":"git"},{"lessThan":"cfa774e6c920c81e700327bf10db8cb50d5db456","status":"affected","ve…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:76e35f07f196705e4068faff4f4c503cbabc04165ecb232a17a505fef4ddad20 · sha256:7055852bcfb41179… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/ethernet/mellanox/mlx5/core/lag/debugfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.19"},{"lessThan":"5.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.134","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.81","ver…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:76e35f07f196705e4068faff4f4c503cbabc04165ecb232a17a505fef4ddad20 · sha256:7055852bcfb41179… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/ethernet/mellanox/mlx5/core/lag/debugfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a3db46d5f4df92630a96f7bc77b60e75c2353e06","status":"affected","version":"7f46a0b7327ae261f9981888708dbca22c283900","versionType":"git"},{"lessThan":"7129632cab3e4d23510b21930aa73b8d97a859f5","status":"affected","version":"7f46a0b7327ae261f9981888708dbca22c283900","versionType":"git"},{"lessThan":"cfa774e6c920c81e700327bf10db8cb50d5db456","status":"affected","ve…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:76e35f07f196705e4068faff4f4c503cbabc04165ecb232a17a505fef4ddad20 · sha256:7055852bcfb41179… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/ethernet/mellanox/mlx5/core/lag/debugfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.19"},{"lessThan":"5.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.134","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.81","ver…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:76e35f07f196705e4068faff4f4c503cbabc04165ecb232a17a505fef4ddad20 · sha256:7055852bcfb41179… · /containers/cna/affected/1

Source references

6 source assertions
{"url":"https://git.kernel.org/stable/c/7129632cab3e4d23510b21930aa73b8d97a859f5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:76e35f07f196705e4068faff4f4c503cbabc04165ecb232a17a505fef4ddad20 · sha256:7055852bcfb41179… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/89c65f2fcd8801365b410f40a427cbcd7f4c28e9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:76e35f07f196705e4068faff4f4c503cbabc04165ecb232a17a505fef4ddad20 · sha256:7055852bcfb41179… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/a3db46d5f4df92630a96f7bc77b60e75c2353e06"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:76e35f07f196705e4068faff4f4c503cbabc04165ecb232a17a505fef4ddad20 · sha256:7055852bcfb41179… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/bf16bca6653679d8a514d6c1c5a2c67065033f14"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:76e35f07f196705e4068faff4f4c503cbabc04165ecb232a17a505fef4ddad20 · sha256:7055852bcfb41179… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/c53cf44588a93000f71817a6bb87a66353c48dee"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:76e35f07f196705e4068faff4f4c503cbabc04165ecb232a17a505fef4ddad20 · sha256:7055852bcfb41179… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/cfa774e6c920c81e700327bf10db8cb50d5db456"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:76e35f07f196705e4068faff4f4c503cbabc04165ecb232a17a505fef4ddad20 · sha256:7055852bcfb41179… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer