CVE-2025-38311: iavf: get rid of the crit lock
iavf: get rid of the crit lock
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.16.3-1 - Upgrade
Upgrade
ubuntu/linux-aws-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1013.13~24.04.1 - Upgrade
Upgrade
ubuntu/linux-azure-nvidia-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1007.7 - Upgrade
Upgrade
ubuntu/linux-gcp-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1016.17~24.04.1 - Upgrade
Upgrade
ubuntu/linux-oem-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1012.12 - Upgrade
Upgrade
ubuntu/linux-oracle-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1013.13~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-32.32.1~24.04.1 - Upgrade
Upgrade
ubuntu/linux-realtime-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1012.12~24.04.1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.15.3 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 7.2.15-1 - Configuration
Remove the iavf crit lock and replace its protection with netdev_lock where needed.
iavf crit_lock = removed - Configuration
Cancel watchdog work without holding the netdev lock, and extend the protected portion of iavf_watchdog_task() to include scheduling additional work.
iavf watchdog and work scheduling work cancellation and scheduling protection = protected by netdev_lock without holding crit_lock
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38311?
CVE-2025-38311 has been classified with a moderate severity level.
How do I fix CVE-2025-38311?
To fix CVE-2025-38311, update your Linux kernel to the latest stable version where the vulnerability is resolved.
What components are affected by CVE-2025-38311?
CVE-2025-38311 affects the Linux Kernel, particularly the iavf module.
What is the nature of CVE-2025-38311?
CVE-2025-38311 involves the removal of the crit lock in the Linux kernel, enhancing overall stability.
Is there a workaround for CVE-2025-38311?
Currently, there is no specific workaround for CVE-2025-38311; upgrading the kernel is the recommended action.