[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-39979":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":14,"duplicates":31,"related":32,"reserved_at":9,"published_at":37,"modified_at":38,"state":39,"summary":40,"references_raw":44,"kevs":55,"epss":56,"epss_history":59,"metrics":325,"affected":326},"CVE-2025-39979","In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: fs, fix UAF in flow counter release\n\nFix a kernel trace [1] caused by releasing an HWS action of a local flow\ncounter in mlx5_cmd_hws_delete_fte(), where the HWS action refcount and\nmutex were not initialized and the counter struct could already be freed\nwhen deleting the rule.\n\nFix it by adding the missing initializations and adding refcount for the\nlocal flow counter struct.\n\n[1] Kernel log:\n Call Trace:\n  \u003CTASK>\n  dump_stack_lvl+0x34/0x48\n  mlx5_fs_put_hws_action.part.0.cold+0x21/0x94 [mlx5_core]\n  mlx5_fc_put_hws_action+0x96/0xad [mlx5_core]\n  mlx5_fs_destroy_fs_actions+0x8b/0x152 [mlx5_core]\n  mlx5_cmd_hws_delete_fte+0x5a/0xa0 [mlx5_core]\n  del_hw_fte+0x1ce/0x260 [mlx5_core]\n  mlx5_del_flow_rules+0x12d/0x240 [mlx5_core]\n  ? ttwu_queue_wakelist+0xf4/0x110\n  mlx5_ib_destroy_flow+0x103/0x1b0 [mlx5_ib]\n  uverbs_free_flow+0x20/0x50 [ib_uverbs]\n  destroy_hw_idr_uobject+0x1b/0x50 [ib_uverbs]\n  uverbs_destroy_uobject+0x34/0x1a0 [ib_uverbs]\n  uobj_destroy+0x3c/0x80 [ib_uverbs]\n  ib_uverbs_run_method+0x23e/0x360 [ib_uverbs]\n  ? uverbs_finalize_object+0x60/0x60 [ib_uverbs]\n  ib_uverbs_cmd_verbs+0x14f/0x2c0 [ib_uverbs]\n  ? do_tty_write+0x1a9/0x270\n  ? file_tty_write.constprop.0+0x98/0xc0\n  ? new_sync_write+0xfc/0x190\n  ib_uverbs_ioctl+0xd7/0x160 [ib_uverbs]\n  __x64_sys_ioctl+0x87/0xc0\n  do_syscall_64+0x59/0x90",null,[],[],[],[],[15,17,19,21,23,25,27,29],{"_key":16},"RHSA-2025:22865",{"_key":18},"SUSE-SU-2025:21080-1",{"_key":20},"SUSE-SU-2025:21147-1",{"_key":22},"SUSE-SU-2025:21180-1",{"_key":24},"OPENSUSE-SU-2025:20091-1",{"_key":26},"DEBIAN-CVE-2025-39979",{"_key":28},"RHSA-2025:22854",{"_key":30},"UBUNTU-CVE-2025-39979",[],[33,34,35,36],{"_key":18},{"_key":20},{"_key":22},{"_key":24},"2025-10-15T07:55:59.609Z","2026-05-11T21:40:07.681Z","Deferred",{"cisa_kev":41,"cisa_ransomware":41,"cisa_vendor":9,"epss_severity":42,"epss_score":43,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":39},false,"low",0.00027,[45,51],{"url":46,"sources":47,"tags":50},"https://git.kernel.org/stable/c/3c77f6d244188c3fb11f6aec40bbfe884f1803b5",[48,49],"cve.org","nvd",[],{"url":52,"sources":53,"tags":54},"https://git.kernel.org/stable/c/6043819e707cefb1c9e59d6e431dcfa735c4f975",[48,49],[],[],{"date":57,"score":43,"percentile":58},"2026-06-04",0.08057,[60,64,67,70,73,76,79,82,85,88,91,94,97,101,104,107,110,113,116,119,122,125,128,131,134,137,140,143,146,149,152,155,158,161,164,166,169,172,175,178,181,184,187,190,193,196,199,202,205,208,210,213,216,219,222,225,228,231,233,236,239,242,244,247,250,253,256,259,262,265,268,271,274,277,280,283,286,289,292,295,298,301,303,306,309,312,315,318,320,323],{"date":61,"score":62,"percentile":63},"2025-11-04",0.00024,0.05223,{"date":65,"score":62,"percentile":66},"2025-11-05",0.05226,{"date":68,"score":62,"percentile":69},"2025-11-06",0.05341,{"date":71,"score":62,"percentile":72},"2025-11-07",0.05352,{"date":74,"score":62,"percentile":75},"2025-11-08",0.05344,{"date":77,"score":62,"percentile":78},"2025-11-09",0.05345,{"date":80,"score":62,"percentile":81},"2025-11-10",0.0532,{"date":83,"score":62,"percentile":84},"2025-11-11",0.05349,{"date":86,"score":62,"percentile":87},"2025-11-12",0.05362,{"date":89,"score":62,"percentile":90},"2025-11-13",0.05378,{"date":92,"score":62,"percentile":93},"2025-11-14",0.05416,{"date":95,"score":62,"percentile":96},"2025-11-15",0.05443,{"date":98,"score":99,"percentile":100},"2025-11-16",0.00026,0.06249,{"date":102,"score":99,"percentile":103},"2025-11-17",0.06239,{"date":105,"score":99,"percentile":106},"2025-11-18",0.0373,{"date":108,"score":99,"percentile":109},"2025-11-19",0.03783,{"date":111,"score":99,"percentile":112},"2025-11-20",0.0385,{"date":114,"score":99,"percentile":115},"2025-11-21",0.06359,{"date":117,"score":99,"percentile":118},"2025-11-22",0.06311,{"date":120,"score":99,"percentile":121},"2025-11-23",0.06289,{"date":123,"score":99,"percentile":124},"2025-11-24",0.06264,{"date":126,"score":99,"percentile":127},"2025-11-25",0.06253,{"date":129,"score":99,"percentile":130},"2025-11-26",0.06272,{"date":132,"score":99,"percentile":133},"2025-11-27",0.06284,{"date":135,"score":99,"percentile":136},"2025-11-28",0.06261,{"date":138,"score":99,"percentile":139},"2025-11-29",0.06306,{"date":141,"score":99,"percentile":142},"2025-11-30",0.063,{"date":144,"score":99,"percentile":145},"2025-12-01",0.06365,{"date":147,"score":99,"percentile":148},"2025-12-02",0.06379,{"date":150,"score":99,"percentile":151},"2025-12-03",0.06391,{"date":153,"score":99,"percentile":154},"2025-12-04",0.06361,{"date":156,"score":99,"percentile":157},"2025-12-05",0.06412,{"date":159,"score":99,"percentile":160},"2025-12-06",0.0642,{"date":162,"score":99,"percentile":163},"2025-12-07",0.06426,{"date":165,"score":99,"percentile":157},"2025-12-08",{"date":167,"score":99,"percentile":168},"2025-12-09",0.06469,{"date":170,"score":99,"percentile":171},"2025-12-10",0.06541,{"date":173,"score":99,"percentile":174},"2025-12-11",0.06535,{"date":176,"score":99,"percentile":177},"2025-12-12",0.06553,{"date":179,"score":99,"percentile":180},"2025-12-13",0.06584,{"date":182,"score":99,"percentile":183},"2025-12-14",0.06558,{"date":185,"score":99,"percentile":186},"2025-12-15",0.06529,{"date":188,"score":99,"percentile":189},"2025-12-16",0.0655,{"date":191,"score":99,"percentile":192},"2025-12-17",0.06638,{"date":194,"score":99,"percentile":195},"2025-12-18",0.06698,{"date":197,"score":99,"percentile":198},"2025-12-19",0.06687,{"date":200,"score":99,"percentile":201},"2025-12-20",0.06681,{"date":203,"score":99,"percentile":204},"2025-12-21",0.06671,{"date":206,"score":43,"percentile":207},"2025-12-22",0.07104,{"date":209,"score":43,"percentile":207},"2025-12-23",{"date":211,"score":43,"percentile":212},"2025-12-24",0.07125,{"date":214,"score":43,"percentile":215},"2025-12-25",0.07193,{"date":217,"score":43,"percentile":218},"2025-12-26",0.07199,{"date":220,"score":43,"percentile":221},"2025-12-27",0.07194,{"date":223,"score":43,"percentile":224},"2025-12-28",0.07196,{"date":226,"score":43,"percentile":227},"2025-12-29",0.07177,{"date":229,"score":43,"percentile":230},"2025-12-30",0.07152,{"date":232,"score":43,"percentile":224},"2025-12-31",{"date":234,"score":43,"percentile":235},"2026-01-01",0.07258,{"date":237,"score":43,"percentile":238},"2026-01-02",0.07254,{"date":240,"score":43,"percentile":241},"2026-01-03",0.07248,{"date":243,"score":43,"percentile":227},"2026-01-04",{"date":245,"score":43,"percentile":246},"2026-01-05",0.07127,{"date":248,"score":43,"percentile":249},"2026-01-06",0.0712,{"date":251,"score":43,"percentile":252},"2026-01-07",0.07144,{"date":254,"score":43,"percentile":255},"2026-01-08",0.07203,{"date":257,"score":43,"percentile":258},"2026-01-09",0.07218,{"date":260,"score":43,"percentile":261},"2026-01-10",0.07247,{"date":263,"score":43,"percentile":264},"2026-01-11",0.07233,{"date":266,"score":43,"percentile":267},"2026-01-12",0.07204,{"date":269,"score":43,"percentile":270},"2026-01-13",0.0719,{"date":272,"score":43,"percentile":273},"2026-01-14",0.07234,{"date":275,"score":43,"percentile":276},"2026-01-15",0.07241,{"date":278,"score":43,"percentile":279},"2026-01-16",0.07256,{"date":281,"score":43,"percentile":282},"2026-01-17",0.07265,{"date":284,"score":43,"percentile":285},"2026-01-18",0.07239,{"date":287,"score":43,"percentile":288},"2026-01-19",0.07207,{"date":290,"score":43,"percentile":291},"2026-01-20",0.07173,{"date":293,"score":43,"percentile":294},"2026-01-21",0.07165,{"date":296,"score":43,"percentile":297},"2026-01-22",0.07143,{"date":299,"score":43,"percentile":300},"2026-01-23",0.07201,{"date":302,"score":43,"percentile":279},"2026-01-24",{"date":304,"score":43,"percentile":305},"2026-01-25",0.07242,{"date":307,"score":43,"percentile":308},"2026-01-26",0.07226,{"date":310,"score":43,"percentile":311},"2026-01-27",0.0721,{"date":313,"score":43,"percentile":314},"2026-01-28",0.07188,{"date":316,"score":43,"percentile":317},"2026-01-29",0.07181,{"date":319,"score":43,"percentile":215},"2026-01-30",{"date":321,"score":43,"percentile":322},"2026-01-31",0.07216,{"date":324,"score":43,"percentile":261},"2026-02-01",[],[327],{"ecosystem":9,"name":328,"vendor":329,"product":329,"cpe_part":330,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":331},"Linux","linux","a",[332,339,342],{"version":333,"is_range":334,"range_type":48,"version_start":335,"version_start_type":336,"version_end":337,"version_end_type":338,"fixed_in":9},">= b581f4266928d3b5d1bbe711e39623d9a1696091, \u003C 3c77f6d244188c3fb11f6aec40bbfe884f1803b5",true,"b581f4266928d3b5d1bbe711e39623d9a1696091","including","3c77f6d244188c3fb11f6aec40bbfe884f1803b5","excluding",{"version":340,"is_range":334,"range_type":48,"version_start":335,"version_start_type":336,"version_end":341,"version_end_type":338,"fixed_in":9},">= b581f4266928d3b5d1bbe711e39623d9a1696091, \u003C 6043819e707cefb1c9e59d6e431dcfa735c4f975","6043819e707cefb1c9e59d6e431dcfa735c4f975",{"version":343,"is_range":41,"range_type":48,"version_start":343,"version_start_type":336,"version_end":343,"version_end_type":336,"fixed_in":9},"6.14"]