Linux · Linux Kernel · CVE-2025-39796
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The Linux kernel contains a flaw related to lock dependency in `xsk notify` triggered via `register netdevice`. Specifically, the issue arises from using `register netdevice` within notifiers, which is problematic. The fix involves skipping the addition of lapbeth for operations-locked devices. The vulnerability was identified through Syzkaller testing. The call chain involves functions such as `xsk notifier`, `notifier call chain`, `register netdevice`, and `lapbeth device event`.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.