CVE-2023-54074

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use correct encap attribute during invalidation With introduction of post action infrastructure most of the users of encap attribute had been modified in order to obtain the correct attribute by calling mlx5e_tc_get_encap_attr() helper instead of assuming encap action is always on default attribute. However, the cited commit didn't modify mlx5e_invalidate_encap() which prevents it from destroying correct modify header action which leads to a warning [0]. Fix the issue by using correct attribute. [0]: Feb 21 09:47:35 c-237-177-40-045 kernel: WARNING: CPU: 17 PID: 654 at drivers/net/ethernet/mellanox/mlx5/core/en_tc.c:684 mlx5e_tc_attach_mod_hdr+0x1cc/0x230 [mlx5_core] Feb 21 09:47:35 c-237-177-40-045 kernel: RIP: 0010:mlx5e_tc_attach_mod_hdr+0x1cc/0x230 [mlx5_core] Feb 21 09:47:35 c-237-177-40-045 kernel: Call Trace: Feb 21 09:47:35 c-237-177-40-045 kernel: <TASK> Feb 21 09:47:35 c-237-177-40-045 kernel: mlx5e_tc_fib_event_work+0x8e3/0x1f60 [mlx5_core] Feb 21 09:47:35 c-237-177-40-045 kernel: ? mlx5e_take_all_encap_flows+0xe0/0xe0 [mlx5_core] Feb 21 09:47:35 c-237-177-40-045 kernel: ? lock_downgrade+0x6d0/0x6d0 Feb 21 09:47:35 c-237-177-40-045 kernel: ? lockdep_hardirqs_on_prepare+0x273/0x3f0 Feb 21 09:47:35 c-237-177-40-045 kernel: ? lockdep_hardirqs_on_prepare+0x273/0x3f0 Feb 21 09:47:35 c-237-177-40-045 kernel: process_one_work+0x7c2/0x1310 Feb 21 09:47:35 c-237-177-40-045 kernel: ? lockdep_hardirqs_on_prepare+0x3f0/0x3f0 Feb 21 09:47:35 c-237-177-40-045 kernel: ? pwq_dec_nr_in_flight+0x230/0x230 Feb 21 09:47:35 c-237-177-40-045 kernel: ? rwlock_bug.part.0+0x90/0x90 Feb 21 09:47:35 c-237-177-40-045 kernel: worker_thread+0x59d/0xec0 Feb 21 09:47:35 c-237-177-40-045 kernel: ? __kthread_parkme+0xd9/0x1d0

• https://git.kernel.org/stable/c/00959a1bad58e4b6c14a2729f84d354255073609
• https://git.kernel.org/stable/c/b8b4292fdd8818ab43b943b6717811651f51e39f
• https://git.kernel.org/stable/c/be071cdb167fc3e25fe81922166b3d499d23e8ac

Published

Dec 24, 2025

Last Modified

Aug 4, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-54069In the Linux kernel, the following vulnerability has been re…
• CVE-2023-5407Controller denial of service due to improper handling of a s…5.9
• CVE-2023-54070In the Linux kernel, the following vulnerability has been re…
• CVE-2023-54071In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2023-54072In the Linux kernel, the following vulnerability has been re…
• CVE-2023-54073In the Linux kernel, the following vulnerability has been re…
• CVE-2023-54075In the Linux kernel, the following vulnerability has been re…
• CVE-2023-54076In the Linux kernel, the following vulnerability has been re…9.8
• CVE-2023-54077In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-54078In the Linux kernel, the following vulnerability has been re…
• CVE-2023-54079In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-5408A privilege escalation flaw was found in the node restrictio…7.2