CVE-2025-39956

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc4-enjuk-tnguy-00865-gc4940196ab02

Description The Linux kernel contains an issue where a failure in the igc led setup() function during the probe process can lead to a kernel panic. This occurs because the igc probe() function fails and does not properly unregister the network device, resulting in a kernel BUG in free netdev(). The issue can be triggered using fault-injection frameworks like failslab. The fix involves treating LED setup failures as non-fatal, allowing the probe to continue with a warning message, and avoiding the kernel panic. The igc probe() function is involved in this issue.

Recommendations Update to Linux kernel version 6.17.0-rc4-enjuk-tnguy-00865-gc4940196ab02 or a later version to resolve this issue.