CVE-2025-68209: mlx5: Fix default values in create CQ
In the Linux kernel, the following vulnerability has been resolved:
mlx5: Fix default values in create CQ
Currently, CQs without a completion function are assigned the mlx5addcqtotasklet function by default. This is problematic since only user CQs created through the mlx5ib driver are intended to use this function.
Additionally, all CQs that will use doorbells instead of polling for completions must call mlx5cqarm. However, the default CQ creation flow leaves a valid value in the CQ's armdb field, allowing FW to send interrupts to polling-only CQs in certain corner cases.
These two factors would allow a polling-only kernel CQ to be triggered by an EQ interrupt and call a completion function intended only for user CQs, causing a null pointer exception.
Some areas in the driver have prevented this issue with one-off fixes but did not address the root cause.
This patch fixes the described issue by adding defaults to the create CQ flow. It adds a default dummy completion function to protect against null pointer exceptions, and it sets an invalid command sequence number by default in kernel CQs to prevent the FW from sending an interrupt to the CQ until it is armed. User CQs are responsible for their own initialization values.
Callers of mlx5corecreatecq are responsible for changing the completion function and arming the CQ per their needs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68209?
CVE-2025-68209 is considered a medium severity vulnerability due to the potential impact on the completion functions in the Linux kernel.
How do I fix CVE-2025-68209?
To fix CVE-2025-68209, update to the latest patched version of the Linux kernel where this vulnerability has been resolved.
What are the potential impacts of CVE-2025-68209?
The potential impacts of CVE-2025-68209 include improper handling of completion functions in completion queues, which could lead to system instability.
Who is affected by CVE-2025-68209?
CVE-2025-68209 affects users of the Linux kernel that utilize mlx5 for managing completion queues.
What components are involved in CVE-2025-68209?
CVE-2025-68209 involves the mlx5 driver in the Linux kernel and specifically concerns the configuration of completion queues.