Linux Kernel mlx5 E-Switch Offloads Pairing Vulnerability

A vulnerability in the Linux kernel's handling of Mellanox mlx5 Ethernet devices can lead to issues with device offloading. The problem arises in the E-Switch component, where the function 'mlx5_get_next_phys_dev()' was called without the necessary interface lock. This vulnerability was introduced by a recent commit that added an assertion to ensure the lock is held, highlighting a race condition that could be exploited during device communication events.

Impact

Exploitation of this vulnerability could disrupt the proper functioning of device offloading in mlx5 E-Switches, potentially leading to performance issues or incorrect handling of network traffic.