CVE-2025-38440Medium· 4.7▾ SunlitA flaw was found in the Linux kernel's net/mlx5e driver. A race condition exists between disabling Dynamic Interrupt Moderation (DIM) and New API (NAPI) callbacks. This timing issue can lead to a NULL pointer dereference, which results in …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 25.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the vendor's CSAF advisory record, not NVD.
Exploit-prediction probability, daily snapshots since Oct 15.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.1%
Last analysed / modified upstream
0.1% → 0.1%
7.8 → 4.7
high → medium
A flaw was found in the Linux kernel's net/mlx5e driver. A race condition exists between disabling Dynamic Interrupt Moderation (DIM) and New API (NAPI) callbacks. This timing issue can lead to a NULL pointer dereference, which results in a kernel panic and a system crash, causing a Denial of Service (DoS). A local attacker with low privileges could potentially exploit this vulnerability.
kernel: Linux kernel: Denial of Service due to race condition in mlx5e driver — rated Moderate by Red Hat. Released 2025-07-25, updated 2026-10-16.
Affected:
No fix planned:
Not affected:
Fix deferred
Workarounds / mitigations:
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-89603High· 7.8kernel: entry: Fix seccomp bypass after ptrace with TSYNC (CVE-2026-89603)
CVE-2026-52945High· 7.5In the Linux kernel, the following vulnerability has been resolved: Revert "wireguard: device: enable threaded NAPI" This reverts commit 933466fc50a8e4eb167acbd0d8ec96a078462e9c which is commit db9ae3b6b43c79b1ba87eea849fd65efa05b4b2e …
CVE-2026-72314Medium· 5.5kernel: regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK (CVE-2026-72314)
CVE-2026-72303Medium· 5.5kernel: ASoC: SOF: ipc4-control: Validate notification payload size (CVE-2026-72303)
CVE-2026-72352Medium· 5.5kernel: HID: bpf: Fix hid_bpf_get_data() range check (CVE-2026-72352)
CVE-2026-72360Medium· 5.5kernel: drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays (CVE-2026-72360)