A buffer overflow flaw exists in the Linux kernel mlx5 driver, potentially allowing a local attacker to trigger a system crash or access unauthorized memory.

The vulnerability exists in the mlx5 driver due to an insufficient buffer size for MCIA register reads. When the device advertises the mcia_32dwords capability, the driver attempts to copy more data than the allocated structure can hold, leading to a buffer overflow that can be triggered by a local user with low privileges.

Successful exploitation of this vulnerability can result in a denial of service (system crash) or potentially expose sensitive kernel memory information. While the CVSS score of 7.1 highlights a high risk, the requirement for local access and low privileges means this primarily threatens multi-user environments or systems where untrusted users can execute code.

Immediate Action: Update the Linux kernel to version 6.12.101, 6.18.42, 7.1.6, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel BUG entries, specifically those referencing fortify_panic or mlx5_query_mcia, which may indicate attempted exploitation.

Compensating Controls: Restrict access to ethtool and hardware diagnostic interfaces to authorized administrators only, as these are the primary vectors for triggering this specific driver flaw.

Public Exploit Available: No (exploit_available: false)

This vulnerability represents a significant stability and security risk for systems utilizing Mellanox/NVIDIA network hardware. Organizations should prioritize patching affected kernels as part of their next maintenance cycle to eliminate the possibility of a local attacker triggering a kernel-level buffer overflow.