PT-2025-46615 · Linux+3 · Linux Kernel+3
Published
2025-09-24
·
Updated
2026-05-07
·
CVE-2025-40140
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel related to USB networking. Specifically, the
rtl8150 set multicast function incorrectly calls netif stop queue and netif wake queue, leading to potential issues with TX queue synchronization. This can result in double submission of URBs (USB requests) as observed in the rtl8150 start xmit function, triggering a warning reported by syzbot in rtl8150 start xmit/usb submit urb. The ndo set rx mode callback should not manage TX queue synchronization directly, as the dev set rx mode function already handles this. The issue stems from the disruptive netif wake queue call within rtl8150 set multicast.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu