Detections
Analytics
Bottlerocket: bottlerocket-kernel-6.12, kernel-6.12: security update to 6.12.23
high Tenable Cloud Security Plugin ID 428155
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, change error flow on
matcher disconnect Currently, when firmware failure occurs during matcher disconnect flow, the error flow
of the function reconnects the matcher back and returns an error, which continues running the calling
function and eventually frees the matcher that is being disconnected. This leads to a case where we have a
freed matcher on the matchers list, which in turn leads to use-after-free and eventual crash. This patch
fixes that by not trying to reconnect the matcher back when some FW command fails during disconnect. Note
that we're dealing here with FW error. We can't overcome this problem. This might lead to bad steering
state (e.g. wrong connection between matchers), and will also lead to resource leakage, as it is the case
with any other error handling during resource destruction. However, the goal here is to allow the driver
to continue and not crash the machine with use-after-free error. (CVE-2025-21751)
Plugin Details
Severity: High
ID: 428155
Version: Revision 1.2
Type: Local
Published: 6/30/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.12
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2025-21751
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 2/27/2025
Reference Information
CVE: CVE-2025-21751