Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error mlx5_mpesw_work() returned without calling complete() when mlx5_lag_get_devcom_comp() returned NULL. A caller that queued the work and waited on mpesww->comp would block indefinitely. Funnel the early-return path through a new "complete" label so the waiter is always woken.
References
- https://git.kernel.org/stable/c/4d720c6c60e1852253b68aeee3044ebed5243adb
- https://git.kernel.org/stable/c/68cdbe498da8475cfd49591954e3db8fc6582eda
- https://git.kernel.org/stable/c/6a802de97a8bf8d5f1e4a048c67de9a8c2d2f9eb
- https://git.kernel.org/stable/c/d4b85f9a668b9c44216bb78daf4ec1a915cc92d1
FAQ
What is CVE-2026-80667?
CVE-2026-80667 is a documented vulnerability. In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error mlx5_mpesw_work() returned without calling complete() when mlx5_lag_g...
How severe is CVE-2026-80667?
CVSS scoring is not yet available for CVE-2026-80667. Check NVD for updates.
Is there a patch for CVE-2026-80667?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.