PT-2025-37226 · Mlx5+2 · Mlx5+2

CVE-2025-39768

·

Published

2025-08-17

·

Updated

2025-09-12

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The Linux kernel contains a flaw in the net/mlx5 module related to handling complex rules rehash errors. Specifically, the error flow when moving rules between matchers could lead to kernel soft lock-ups or other problematic behavior if the rule movement failed. The issue stemmed from incomplete error handling during the rehash process, including failing to properly handle timeouts or errors during rule creation. The patch addresses these problems by improving error handling, ensuring that the first error code received is returned to the caller, and preventing unnecessary polling for completions when errors occur.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Assertion Failure

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-09215
CVE-2025-39768

Affected Products

Astra Linux
Linux Kernel
Mlx5