PT-2025-40099 · Linux+5 · Linux Kernel+5
Syzbot
·
Published
2025-08-25
·
Updated
2026-05-26
·
CVE-2025-39925
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel has an issue where the j1939 protocol lacked a NETDEV UNREGISTER notification handler, leading to problems when unregistering network devices. Specifically, the
j1939 sk bind() function holds an extra reference on a struct j1939 priv, and this reference was not being released promptly upon NETDEV UNREGISTER notification. This prevented the struct net device usage count from reaching zero, blocking the unregister netdevice() function. The issue arises because a call to j1939 priv put() was unconditionally delayed until j1939 sk sock destruct(), but it needed to be called immediately when the NETDEV UNREGISTER notification fired.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Debian
Linux Kernel
Red Hat
Rocky Linux
Suse