In the Linux kernel, deletion of an mlx5 table that contains a miss table created by the mlx5hws_table_set_default_miss API leaves a dangling reference in the miss_tbl list. This dangling pointer can be dereferenced, causing undefined behavior, memory corruption, or a kernel crash. The flaw is a classic use‑after‑free weakness (CWE‑416).

The vulnerability affects the Linux kernel’s mlx5 driver, used for NVIDIA Ethernet and InfiniBand devices. Any kernel release that includes the buggy code and has not yet incorporated the described commit (16b81428, 60e9e82, 6efdc212) is potentially vulnerable. The exact version range is not specified, but any kernel versions compiled with the affected mlx5 module prior to the fix are at risk.

The CVSS score is not disclosed, and EPSS data is unavailable; the vulnerability is not listed in CISA KEV. While the defect is structural, exploitation would normally require privileged access to the mlx5 driver’s table management APIs or a privileged process capable of loading the driver. An attacker who can trigger the fault could cause a kernel panic or potentially leverage the memory corruption for privilege escalation. The absence of public exploitation data suggests a moderate likelihood of attack, but the potential impact remains high if a successful exploit is achieved.