CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix variable not being completed when function returns
When cmdallocindex(), fails cmdworkhandler() needs to complete ent->slotted before returning early. Otherwise the task which issued the command may hang:
mlx5core 0000:01:00.0: cmdworkhandler:877:(pid 3880418): failed to allocate command entry INFO: task kworker/13:2:4055883 blocked for more than 120 seconds. Not tainted 4.19.90-25.44.v2101.ky10.aarch64 #1 "echo 0 > /proc/sys/kernel/hungtasktimeoutsecs" disables this message. kworker/13:2 D 0 4055883 2 0x00000228 Workqueue: events mlx5etxdimwork [mlx5core] Call trace: switchto+0xe8/0x150 schedule+0x2a8/0x9b8 schedule+0x2c/0x88 scheduletimeout+0x204/0x478 waitforcommon+0x154/0x250 waitforcompletion+0x28/0x38 cmdexec+0x7a0/0xa00 [mlx5core] mlx5cmdexec+0x54/0x80 [mlx5core] mlx5coremodifycq+0x6c/0x80 [mlx5core] mlx5coremodifycqmoderation+0xa0/0xb8 [mlx5core] mlx5etxdimwork+0x54/0x68 [mlx5core] processonework+0x1b0/0x448 workerthread+0x54/0x468 kthread+0x134/0x138 retfromfork+0x10/0x18
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21662?
CVE-2025-21662 has not been assigned a severity score yet, but it addresses important functionality in command handling.
How do I fix CVE-2025-21662?
You can fix CVE-2025-21662 by updating to the latest version of the Linux Kernel that includes the patch.
Which versions of the Linux Kernel are affected by CVE-2025-21662?
Specific affected versions are not mentioned, but it is recommended to check the latest Linux Kernel updates for resolutions to this vulnerability.
What are the symptoms of CVE-2025-21662?
The main issue related to CVE-2025-21662 can lead to incomplete variable handling during command processing in the Linux Kernel.
Is CVE-2025-21662 being actively exploited?
There is no current public information indicating that CVE-2025-21662 is actively exploited in the wild.