PT-2025-14351 · Linux+6 · Linux Kernel+6
Publicado
2025-03-07
·
Atualizado
2026-05-22
·
CVE-2025-21970
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to the fixed version
Description
A crash in the Linux kernel can occur when removing a LAG device from a bridge. This happens because the
mlx5 lag is shared fdb check returns false if one of the PFs is unloaded, causing mlx5 esw bridge lag rep get() and its caller to return NULL. As a result, the flush of offloaded entries is skipped, and the bridge fdb entry's lastuse is not updated, leading to the entry never being aged. The kernel bridge notifier then handles the SWITCHDEV FDB ADD TO BRIDGE event, causing a crash when accessing the already destroyed bond netdev.Recommendations
To fix this issue, remove the LAG state checks. The LAG state is already checked in the commit 15f8f168952f, and the driver still needs to skip offload if the LAG becomes invalid after initialization.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu