CVE-2025-39956

CVE-2025-39956

High · published October 9, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
6.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

igc: don't fail igc_probe() on LED setup error

When igc_led_setup() fails, igc_probe() fails and triggers kernel panic

in free_netdev() since unregister_netdev() is not called. [1]

This behavior can be tested using fault-injection framework, especially

the failslab feature. [2]

Since LED support is not mandatory, treat LED setup failures as

non-fatal and continue probe with a warning message, consequently

avoiding the kernel panic.

[1]

kernel BUG at net/core/dev.c:12047!

Oops: invalid opcode: 0000 [#1] SMP NOPTI

CPU: 0 UID: 0 PID: 937 Comm: repro-igc-led-e Not tainted 6.17.0-rc4-enjuk-tnguy-00865-gc4940196ab02 #64 PREEMPT(voluntary)

Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014

RIP: 0010:free_netdev+0x278/0x2b0

[...]

Call Trace:

<TASK>

igc_probe+0x370/0x910

local_pci_probe+0x3a/0x80

pci_device_probe+0xd1/0x200

[...]

[2]

#!/bin/bash -ex

FAILSLAB_PATH=/sys/kernel/debug/failslab/

DEVICE=0000:00:05.0

START_ADDR=$(grep " igc_led_setup" /proc/kallsyms \

| awk '{printf("0x%s", $1)}')

END_ADDR=$(printf "0x%x" $((START_ADDR + 0x100)))

echo $START_ADDR > $FAILSLAB_PATH/require-start

echo $END_ADDR > $FAILSLAB_PATH/require-end

echo 1 > $FAILSLAB_PATH/times

echo 100 > $FAILSLAB_PATH/probability

echo N > $FAILSLAB_PATH/ignore-gfp-wait

echo $DEVICE > /sys/bus/pci/drivers/igc/bind

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00170 · 6.1th percentile
Published
2025-10-09T14:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 6.9, < 6.12.496.12.49
linux/linux_kernel≥ 6.13, < 6.16.96.16.9
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 09 OCT 09:47Z
    igc: don't fail igc_probe() on LED setup error
    cvelistv5