The Linux kernel vulnerability tracked as CVE‑2024‑38595 patches a subtle lifecycle inconsistency in the net/mlx5 driver’s devlink handling — a small code-path mismatch that can trigger kernel call traces and availability problems when the peer devlink set operation is invoked for an SF...
A recently disclosed Linux kernel vulnerability, tracked as CVE‑2025‑40251, stems from a small but consequential oversight in devlink’s rate node teardown logic: the function devl_rate_nodes_destroy failed to clear the devlink_rate->parent pointer after decrementing the parent's reference count...