Linux Kernel NULL Pointer Dereference Vulnerability in net/mlx5e Component

A NULL pointer dereference vulnerability has been identified in the Linux kernel's net/mlx5e component. This issue arises when a module is unloaded while a peer traffic control (tc) flow is still offloaded. The vulnerability occurs because the peer uplink representative profile is switched to a network interface card (NIC) profile, leading to the destruction of the neighbor encapsulation lock. During the module unload process, the virtual function representative network devices are unregistered, causing the deletion of the original non-peer tc flow, which in turn removes the peer flow. This deletion process attempts to access the already destroyed encapsulation lock, resulting in a kernel NULL pointer dereference.

Impact

Exploitation of this vulnerability leads to a kernel NULL pointer dereference, causing a crash or undefined behavior in the system.