PT-2025-37226 · Linux+2 · Linux Kernel+2

Published 2025-09-11 · Updated 2025-09-12 · CVE-2025-39768

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains a flaw in the net/mlx5 module related to handling complex rules rehash errors. Specifically, the error flow when moving rules between matchers could lead to kernel soft lock-ups or other problematic behavior if the rule movement failed. The issue stemmed from incomplete error handling during the rehash process, including failing to properly handle timeouts or errors during rule creation. The patch addresses these problems by improving error handling, ensuring that the first error code received is returned to the caller, and preventing unnecessary polling for completions when errors occur.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2025-39768

Affected Products

Astra Linux

Linux Kernel

Mlx5

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39768.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39768 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39768 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-39768 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-39768 · Vendor Advisory
• https://git.kernel.org/stable/c/4a842b1bf18a32ee0c25dd6dd98728b786a76fe4 · Patch
• https://ubuntu.com/security/CVE-2025-39768 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-39768 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-39768 · Security Note
• https://git.kernel.org/stable/c/37d54bc28d092bc3b314da45d730f00e9d86ec2a · Patch
• https://twitter.com/CVEnew/status/1966191569272451454 · Twitter Post
• https://git.kernel.org/linus/4a842b1bf18a32ee0c25dd6dd98728b786a76fe4 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note