CVE-2025-38161 RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Fixes CVEs for mlx5 Driver Issues in Cybersecurity Update Microsoft has addressed two vulnerabilities in the mlx5 driver related to network and RDMA functionalities. CVE-2025-38109 concerns the unloading of ECVF vports during shutdown, while CVE-2025-38161 addresses error handling upon firmware failures during RQ destruction. Both vulnerabilities were published on July 3, 2025. 5 sources 50