CVE-2025-39768

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: HWS, fix complex rules rehash error flow

Moving rules from matcher to matcher should not fail.

However, if it does fail due to various reasons, the error flow

should allow the kernel to continue functioning (albeit with broken

steering rules) instead of going into series of soft lock-ups or

some other problematic behaviour.

Similar to the simple rules, complex rules rehash logic suffers

from the same problems. This patch fixes the error flow for moving

complex rules:

- If new rule creation fails before it was even enqeued, do not

poll for completion

- If TIMEOUT happened while moving the rule, no point trying

to poll for completions for other rules. Something is broken,

completion won't come, just abort the rehash sequence.

- If some other completion with error received, don't give up.

Continue handling rest of the rules to minimize the damage.

- Make sure that the first error code that was

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References