CVE-2026-64522: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA
mlx5exfrmaddstate() handles acquire-flow temporary SAs by allocating software state and skipping hardware offload setup.
That path jumps to the common success label before taking the eswitch mode block. After tunnel-mode validation was moved earlier, the common success label unconditionally calls mlx5eswitchunblockmode(). For acquire SAs, this decrements esw->offloads.numblockmode without a matching increment.
Return directly after installing the acquire SA offload handle, so only the paths that successfully called mlx5eswitchblockmode() call the matching unblock.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64522?
CVE-2026-64522 is rated with a risk score of 27, indicating a moderate severity level.
How do I fix CVE-2026-64522?
To address CVE-2026-64522, update to the latest version of the Linux kernel where this vulnerability has been patched.
What systems are affected by CVE-2026-64522?
CVE-2026-64522 affects the Linux kernel, particularly in the mlx5e driver used for networking.
What is the main issue caused by CVE-2026-64522?
CVE-2026-64522 results from a block underflow in eswitch mode, which could impact the handling of temporary SAs during IPsec operations.
When was CVE-2026-64522 published?
CVE-2026-64522 was published on July 25, 2026.