Linux kernel (net/mlx5e) vulnerabilities

In the Linux kernel, the net/mlx5e driver (mlx5_core) unnecessarily clones post action attributes a second time in mlx5e_tc_post_act_add(). This causes the second copy not to be properly updated in the neigh update code, leading to a use-after-free in mlx5_cmd_set_fte.

In the Linux kernel, the net/mlx5e driver for Mellanox mlx5 contains a use-after-free bug. The code uses the eswitch object mapping pool in NIC mode where it is not initialized, leading to a read of freed memory when adding flow rules (e.g., via tc flower).

In the Linux kernel, the net/mlx5e driver (Mellanox) has a netif state handling flaw. When netdev registration fails, mlx5e_suspend does not free resources because netif_device_present() returns false, leading to memory leaks and a NULL pointer Oops.