PT-2025-39131 · Linux+1 · Linux Kernel+1

Published 2025-09-08 · Updated 2025-12-12 · CVE-2025-39874

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to MACsec feature synchronization on RTM NEWLINK events. Syzkaller identified a condition where the lower network device could become locked when using ETHTOOL SFEATURES. This occurs because the upper and lower features are out of sync, leading to a deadlock during feature updates. The issue arises from a race condition when updating network features, specifically within the netdev sync lower features function, potentially causing the system to hang. The vulnerability is triggered when attempting to synchronize features between the upper and lower layers of a network device, specifically during MACsec link creation. The netdev lock ops function is involved in the locking mechanism that can lead to the deadlock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

BDU:2025-13895

CVE-2025-39874

Affected Products

Astra Linux

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39874.json · Exploit
• https://git.kernel.org/stable/c/0f82c3ba66c6b2e3cde0f255156a753b108ee9dc · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-39874 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39874 · Vendor Advisory
• https://git.kernel.org/stable/c/d7624629ccf47135c65fef0701fa0d9a115b87f3 · Patch
• https://ubuntu.com/security/CVE-2025-39874 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-39874 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-39874 · Security Note
• https://bdu.fstec.ru/vul/2025-13895 · Security Note
• https://osv.dev/vulnerability/CVE-2025-39874 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-39874 · Vendor Advisory
• https://lore.kernel.org/linux-cve-announce/2025092300-CVE-2025-39874-d462@gregkh · Note
• https://twitter.com/CVEnew/status/1970393438685188110 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://cybersecurity-help.cz/vulnerabilities/116053 · Note