CVE-2025-21701

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.13.0-rc6+

Description: A vulnerability has been resolved in the Linux kernel, related to a race condition between device unregistration and ethnl operations. This issue can occur when a device is being unregistered while its number of channels are being modified, resulting in a warning message and a potential crash. The problem arises because unregister netdevice many notify might run before the rtnl lock section of ethnl operations, such as set channels. To fix this, any operation on devices being unregistered is denied. A check was already in place in ethnl ops begin, but it was not wide enough.

Recommendations: For Linux kernel versions prior to 6.13.0-rc6+, update to a version that includes the fix for this issue. As a temporary workaround, consider disabling ethnl operations on devices that are being unregistered to minimize the risk of exploitation.