CVE-2025-21662

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74

Description A vulnerability in the Linux kernel has been resolved, specifically in the net/mlx5 component. The issue occurs when the cmd alloc index() function fails, and the cmd work handler() function needs to complete the ent->slotted variable before returning early. If this does not happen, the task that issued the command may hang. This can lead to a situation where a task is blocked for more than 120 seconds, resulting in a hung task message.

Recommendations For Linux kernel versions prior to 6.6.74, update to version 6.6.74 or later to resolve the issue. As a temporary workaround, consider disabling the cmd work handler() function until a patch is available. Restrict access to the net/mlx5 component to minimize the risk of exploitation. Avoid using the cmd alloc index() function in the affected kernel version until the issue is resolved.