PT-2025-37227 · Linux+2 · Linux Kernel+2

Published 2025-09-11 · Updated 2025-09-12 · CVE-2025-39769

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.16.0

Description: The Linux kernel contained a lockdep warning within the bnxt en module during device removal (rmmod). A netdev assertion was incorrectly triggered during the bnxt remove one() function, which should not require a lock at that stage as the network device is already unregistered. This was addressed by using netdev assert locked or invisible() which avoids the assertion when the network device is unregistered.

Recommendations: Update to Linux kernel version 6.16.0 or later.

Exploit

Fix

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

CVE-2025-39769

Affected Products

Astra Linux

Linux Kernel

Bnxt En

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39769.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-39769 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-39769 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39769 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-39769 · Security Note
• https://git.kernel.org/stable/c/4611d88a37cfc18cbabc6978aaf7325d1ae3f53a · Patch
• https://git.kernel.org/stable/c/5885d39dce879fbbc953f40e19adb60c29802302 · Patch
• https://osv.dev/vulnerability/CVE-2025-39769 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39769 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39769 · Security Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/4611d88a37cfc18cbabc6978aaf7325d1ae3f53a · Note
• https://twitter.com/VulmonFeeds/status/1966296037087191373 · Twitter Post
• https://twitter.com/CVEnew/status/1966191568257429516 · Twitter Post