PT-2025-6937 · Linux+6 · Linux Kernel+6
Antoine Tenart
·
Published
2025-02-13
·
Updated
2026-03-14
·
CVE-2025-21701
CVSS v3.1
7.4
High
| Vector | AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.13.0-rc6+
Description:
A vulnerability has been resolved in the Linux kernel, related to a race condition between device unregistration and ethnl operations. This issue can occur when a device is being unregistered while its number of channels are being modified, resulting in a warning message and a potential crash. The problem arises because
unregister netdevice many notify might run before the rtnl lock section of ethnl operations, such as set channels. To fix this, any operation on devices being unregistered is denied. A check was already in place in ethnl ops begin, but it was not wide enough.Recommendations:
For Linux kernel versions prior to 6.13.0-rc6+, update to a version that includes the fix for this issue.
As a temporary workaround, consider disabling ethnl operations on devices that are being unregistered to minimize the risk of exploitation.
Exploit
Fix
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu