Linux · Linux Kernel · CVE-2025-21701
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.13.0-rc6+
Description:
A vulnerability has been resolved in the Linux kernel, related to a race condition between device unregistration and ethnl operations. This issue can occur when a device is being unregistered while its number of channels are being modified, resulting in a warning message and a potential crash. The problem arises because `unregister netdevice many notify` might run before the rtnl lock section of ethnl operations, such as `set channels`. To fix this, any operation on devices being unregistered is denied. A check was already in place in `ethnl ops begin`, but it was not wide enough.
Recommendations:
For Linux kernel versions prior to 6.13.0-rc6+, update to a version that includes the fix for this issue.
As a temporary workaround, consider disabling ethnl operations on devices that are being unregistered to minimize the risk of exploitation.