CVE-2025-38551
virtio-net: fix recursived rtnl_lock() during probe()
Résumé
virtio-net: fix recursived rtnl_lock() during probe()
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In the Linux kernel, the following vulnerability has been resolved:
virtio-net: fix recursived rtnl_lock() during probe()
The deadlock appears in a stack trace like:
virtnet_probe()
rtnl_lock()
virtio_config_changed_work()
netdev_notify_peers()
rtnl_lock()
It happens if the VMM sends a VIRTIO_NET_S_ANNOUNCE request while the
virtio-net driver is still probing.
The config_work in probe() will get scheduled until virtnet_open() enables
the config change notification via virtio_config_driver_enable().
Paquets affectés
Linux
Kernel
[{"type":"ECOSYSTEM","events":[{"introduced":"6.12.0"},{"fixed":"6.12.40"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.15.8"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- BellSoft Alpaquita BELL-CVE-2025-38551 linux-lts Corrigé dans: 6.12.41-r0
- Debian DEBIAN-CVE-2025-38551 linux Corrigé dans: 6.12.41-1
- Ubuntu UBUNTU-CVE-2025-38551 linux-hwe-edge
Références
- advisory github.com
- advisory nvd.nist.gov
- package git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org