A high-severity race condition in the Linux kernel Mellanox mlx5e driver, currently being exploited in the wild, can cause system-wide denial-of-service.

This is a race condition vulnerability within the AF_XDP socket implementation of the mlx5e network driver. It occurs due to unlocked writes to the Internal Channel Operations Send Queue (ICOSQ) when CPU affinity changes, which is reachable by unauthenticated users.

With a CVSS score of 7.5, this vulnerability represents a significant risk to system availability. Because it triggers kernel-level errors and crashes, it can lead to unplanned downtime for infrastructure relying on Mellanox network interfaces. The observed exploitation in the wild heightens the urgency for patching.

Immediate Action: Update the Linux kernel to version 7.0.11 or later to apply the necessary synchronization fixes.

Proactive Monitoring: Monitor system logs for kernel warnings, specifically those containing "Bad OP in ICOSQ CQE" or references to drivers/net/ethernet/mellanox/mlx5/core/en_rx.c.

Compensating Controls: If immediate patching is not feasible, restrict the use of AF_XDP sockets on affected hardware to limit the attack surface.

Public Exploit Available: No (exploit_available: false)

The fact that this vulnerability is actively observed in the wild necessitates immediate patching. Security teams should identify all Linux systems utilizing Mellanox network drivers and schedule kernel updates as a top priority to prevent service disruption.