CVE-2025-38551
virtio-net: fix recursived rtnl_lock() during probe()
Summary
virtio-net: fix recursived rtnl_lock() during probe()
Original description
The description as published by the source.
In the Linux kernel, the following vulnerability has been resolved:
virtio-net: fix recursived rtnl_lock() during probe()
The deadlock appears in a stack trace like:
virtnet_probe()
rtnl_lock()
virtio_config_changed_work()
netdev_notify_peers()
rtnl_lock()
It happens if the VMM sends a VIRTIO_NET_S_ANNOUNCE request while the
virtio-net driver is still probing.
The config_work in probe() will get scheduled until virtnet_open() enables
the config change notification via virtio_config_driver_enable().
Affected packages
Linux
Kernel
[{"type":"ECOSYSTEM","events":[{"introduced":"6.12.0"},{"fixed":"6.12.40"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.15.8"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- BellSoft Alpaquita BELL-CVE-2025-38551 linux-lts Fixed in: 6.12.41-r0
- Debian DEBIAN-CVE-2025-38551 linux Fixed in: 6.12.41-1
- Ubuntu UBUNTU-CVE-2025-38551 linux-hwe-edge
References
- advisory github.com
- advisory nvd.nist.gov
- package git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org