SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-80667

UNKNOWN · CVSS N/A EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-20

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's mlx5 driver, specifically in the handling of the LAG and MPESW functionalities, where a failure to call the complete() function can lead to indefinite blocking of callers waiting for a completion signal. This issue could impact systems relying on these features, potentially causing service disruptions or degraded performance. Organizations using affected Linux kernel versions should prioritize patching to mitigate the risk of operational issues.

CVE
CVE-2026-80667
Severity
UNKNOWN
CVSS
N/A
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error mlx5_mpesw_work() returned without calling complete() when mlx5_lag_get_devcom_comp() returned NULL. A caller that queued the work and waited on mpesww->comp would block indefinitely. Funnel the early-return path through a new "complete" label so the waiter is always woken.