PT-2025-4355

CVE-2025-21674

·

Published

2025-01-15

·

Updated

2025-10-03

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to incorrect locking of resources in the Linux kernel, specifically in the mlx5 driver. This can lead to a denial of service. The problem occurs when enabling IPsec packet offload in tunnel mode, resulting in a kernel panic due to two issues: incorrect marking of SA mode and unnecessary flush workqueue in the SA delete routine. A possible interrupt unsafe locking scenario can cause a deadlock.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2025-12647
ALT-PU-2025-3467
ALT-PU-2025-3500
AZL-56399
OESA-2025-1371
OESA-2025-1372
OPENSUSE-SU-2025_0428-1
OPENSUSE-SU-2025_0499-1
OPENSUSE-SU-2025_0557-1
SUSE-SU-2025:0428-1
SUSE-SU-2025_0428-1
SUSE-SU-2025:0499-1
SUSE-SU-2025_0499-1
SUSE-SU-2025:0557-1
SUSE-SU-2025_0557-1
SUSE-SU-2025:0564-1
SUSE-SU-2025:20165-1
SUSE-SU-2025:20166-1
SUSE-SU-2025:20248-1
SUSE-SU-2025:20249-1
USN-7445-1
USN-7448-1
USN-7595-1
USN-7595-2
USN-7595-3
USN-7595-4
USN-7595-5
USN-7596-1
USN-7596-2
USN-7653-1
Found an issue in the description? Have something to add? Feel free to write us 👾