PT-2025-46595 · Linux+3 · Linux Kernel+3
Published
2025-10-05
·
Updated
2026-05-07
·
CVE-2025-40120
CVSS v2.0
4.3
Medium
| Vector | AV:A/AC:H/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel related to USB runtime power management (PM) and Real-Time Network Layer (RTNL) interactions with the AX88772* network adapter. The issue arises when runtime PM is enabled, potentially leading to deadlocks or problems with power management and Medium Dependent Interface (MDIO) operations. Specifically, the
ndo open() function, operating under RTNL, might trigger a resume operation (usb autopm get interface()) while holding the USB PM lock. This resume path then invokes phylink/phylib and MDIO, which also require RTNL, creating a potential deadlock scenario. To address this, a usage reference is held to keep the device runtime-PM active during binding and released during unbinding, preventing runtime suspend regardless of system settings.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Time Of Check To Time Of Use
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ax88772
Linuxmint
Linux Kernel
Ubuntu