PT-2025-4355
CVE-2025-21674
·
Published
2025-01-15
·
Updated
2025-10-03
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to incorrect locking of resources in the Linux kernel, specifically in the mlx5 driver. This can lead to a denial of service. The problem occurs when enabling IPsec packet offload in tunnel mode, resulting in a kernel panic due to two issues: incorrect marking of SA mode and unnecessary flush workqueue in the SA delete routine. A possible interrupt unsafe locking scenario can cause a deadlock.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾