PT-2025-4343 · Linux+5 · Linux Kernel+5
Published
2025-01-21
·
Updated
2025-10-03
·
CVE-2025-21662
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
A vulnerability in the Linux kernel has been resolved, specifically in the net/mlx5 component. The issue occurs when the
cmd alloc index() function fails, and the cmd work handler() function needs to complete the ent->slotted variable before returning early. If this does not happen, the task that issued the command may hang. This can lead to a situation where a task is blocked for more than 120 seconds, resulting in a hung task message.Recommendations
For Linux kernel versions prior to 6.6.74, update to version 6.6.74 or later to resolve the issue.
As a temporary workaround, consider disabling the
cmd work handler() function until a patch is available.
Restrict access to the net/mlx5 component to minimize the risk of exploitation.
Avoid using the cmd alloc index() function in the affected kernel version until the issue is resolved.Exploit
Fix
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu