net/mlx5: fw_tracer, Validate format string parameters

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2025-68816
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-01-13 16:16:03 UTC
Updated2026-07-14 13:18:00 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: net/mlx5: fw_tracer, Validate format string parameters Add validation for format string parameters in the firmware tracer to prevent potential security vulnerabilities and crashes from malformed format strings received from firmware. The firmware tracer receives format strings from the device firmware and uses them to format trace messages. Without proper validation, bad firmware could provide format strings with invalid format specifiers (e.g., %s, %p, %n) that could lead to crashes, or other undefined behavior. Add mlx5_tracer_validate_params() to validate that all format specifiers in trace strings are limited to safe integer/hex formats (%x, %d, %i, %u, %llx, %lx, etc.). Reject strings containing other format types that could be used to access arbitrary memory or cause crashes. Invalid format strings are added to the trace output for visibility with "BAD_FORMAT: " prefix.

Risk And Classification

EPSS: 0.001730000 probability, percentile 0.068820000 (date 2026-07-14)

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 70dd6fdb8987b14f7b6105f6be0617299e459398 95624b731c490a4b849844269193a233d6d556a0 git Not specified
CNA Linux Linux affected 70dd6fdb8987b14f7b6105f6be0617299e459398 768d559f466cdd72849110a7ecd76a21d52dcfe3 git Not specified
CNA Linux Linux affected 70dd6fdb8987b14f7b6105f6be0617299e459398 38ac688b52ef26a88f8bc4fe26d24fdd0ff91e5d git Not specified
CNA Linux Linux affected 70dd6fdb8987b14f7b6105f6be0617299e459398 8ac688c0e430dab19f6a9b70df94b1f635612c1a git Not specified
CNA Linux Linux affected 70dd6fdb8987b14f7b6105f6be0617299e459398 45bd283b1d69e2c97cddcb9956f0e0261fc4efd7 git Not specified
CNA Linux Linux affected 70dd6fdb8987b14f7b6105f6be0617299e459398 8c35c2448086870509ede43947845be0833251f0 git Not specified
CNA Linux Linux affected 70dd6fdb8987b14f7b6105f6be0617299e459398 b35966042d20b14e2d83330049f77deec5229749 git Not specified
CNA Linux Linux affected 4.19 Not specified
CNA Linux Linux unaffected 4.19 semver Not specified
CNA Linux Linux unaffected 5.10.248 5.10.* semver Not specified
CNA Linux Linux unaffected 5.15.198 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.160 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.120 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.64 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.3 6.18.* semver Not specified
CNA Linux Linux unaffected 6.19 * original_commit_for_fix Not specified
ADP Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP affected V3.1.6 * custom Not specified
ADP Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP affected V3.1.6 * custom Not specified
ADP Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP affected V3.1.6 * custom Not specified
ADP Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP affected V3.1.6 * custom Not specified
ADP Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP affected V3.1.6 * custom Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/768d559f466cdd72849110a7ecd76a21d52dcfe3 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
cert-portal.siemens.com/productcert/html/ssa-019113.html 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e cert-portal.siemens.com
git.kernel.org/stable/c/b35966042d20b14e2d83330049f77deec5229749 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/8c35c2448086870509ede43947845be0833251f0 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/45bd283b1d69e2c97cddcb9956f0e0261fc4efd7 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/8ac688c0e430dab19f6a9b70df94b1f635612c1a 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/38ac688b52ef26a88f8bc4fe26d24fdd0ff91e5d 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/95624b731c490a4b849844269193a233d6d556a0 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report