CVE-2025-39832CWE-667

CVE-2025-39832

Medium · published September 16, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
1.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: Fix lockdep assertion on sync reset unload event

Fix lockdep assertion triggered during sync reset unload event. When the

sync reset flow is initiated using the devlink reload fw_activate

option, the PF already holds the devlink lock while handling unload

event. In this case, delegate sync reset unload event handling back to

the devlink callback process to avoid double-locking and resolve the

lockdep warning.

Kernel log:

WARNING: CPU: 9 PID: 1578 at devl_assert_locked+0x31/0x40

[...]

Call Trace:

<TASK>

mlx5_unload_one_devl_locked+0x2c/0xc0 [mlx5_core]

mlx5_sync_reset_unload_event+0xaf/0x2f0 [mlx5_core]

process_one_work+0x222/0x640

worker_thread+0x199/0x350

kthread+0x10b/0x230

? __pfx_worker_thread+0x10/0x10

? __pfx_kthread+0x10/0x10

ret_from_fork+0x8e/0x100

? __pfx_kthread+0x10/0x10

ret_from_fork_asm+0x1a/0x30

</TASK>

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00116 · 1.5th percentile
Weakness
CWE-667 · Improper Locking
Published
2025-09-16T18:15Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel≥ 6.5, < 6.6.1046.6.104
linux/linux_kernel≥ 6.7, < 6.12.456.12.45
linux/linux_kernel≥ 6.13, < 6.16.56.16.5
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
EPSS history
Timeline
  • 16 SEP 13:08Z
    net/mlx5: Fix lockdep assertion on sync reset unload event
    cvelistv5