CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: LAG, MPESW, Fix missing complete() on devcom error
mlx5mpeswwork() returned without calling complete() when mlx5laggetdevcomcomp() returned NULL. A caller that queued the work and waited on mpesww->comp would block indefinitely.
Funnel the early-return path through a new "complete" label so the waiter is always woken.
Affected Software
Event History
Frequently Asked Questions
What is the practical impact if this condition occurs?
A caller that queues the MPESW work and waits on its completion can block indefinitely because the completion signal is not sent when mlx5_lag_get_devcom_comp() returns NULL.
What condition triggers the indefinite wait?
The issue is triggered when mlx5_mpesw_work() encounters a NULL result from mlx5_lag_get_devcom_comp() and returns through the affected early-return path.
What does the fix change?
The fix routes the devcom-error early-return path through a completion label, ensuring complete() is called and any waiting caller is woken.