CVE-2026-68139

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Use sender devcom for MPV master-up

After PCIe DPC recovery, mlx5 reloads the affected functions and

replays multiport affiliation events. In the reported failure, the

first relevant device error was:

pcieport 0000:10:01.1: DPC: containment event

pcieport 0000:10:01.1: PCIe Bus Error: severity=Uncorrected (Fatal)

pcieport 0000:10:01.1: [ 5] SDES (First)

mlx5 recovered the PCI functions and resumed 0000:11:00.1. During

that resume, RDMA multiport binding replayed

MLX5_DRIVER_EVENT_AFFILIATION_DONE and mlx5e sent

MPV_DEVCOM_MASTER_UP. The host then panicked with:

BUG: kernel NULL pointer dereference, address: 0000000000000010

RIP: mlx5_devcom_comp_set_ready+0x5/0x40 [mlx5_core]

RDI: 0000000000000000

Call trace included:

mlx5_devcom_comp_set_ready

mlx5e_devcom_event_mpv

mlx5_devcom_send_event

mlx5_ib_bind_slave_port

mlx5r_mp_probe

mlx5_pci_resume

MPV devcom r

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References