CVE-2025-39695: RDMA/rxe: Flush delayed SKBs while releasing RXE resources
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Flush delayed SKBs while releasing RXE resources
When skb packets are sent out, these skb packets still depends on the rxe resources, for example, QP, sk, when these packets are destroyed.
If these rxe resources are released when the skb packets are destroyed, the call traces will appear.
To avoid skb packets hang too long time in some network devices, a timestamp is added when these skb packets are created. If these skb packets hang too long time in network devices, these network devices can free these skb packets to release rxe resources.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39695?
The severity of CVE-2025-39695 is classified as high due to its potential impact on network performance and resource management in the Linux kernel.
How do I fix CVE-2025-39695?
To fix CVE-2025-39695, you should update to the latest stable version of the Linux kernel where the vulnerability has been addressed.
What systems are affected by CVE-2025-39695?
CVE-2025-39695 affects the Linux kernel, particularly systems utilizing RDMA/rxe features.
What are the potential impacts of CVE-2025-39695?
The potential impacts of CVE-2025-39695 include resource leaks and degraded network performance due to improper handling of delayed skb packets.
Is there a workaround for CVE-2025-39695?
While it is recommended to apply updates, there are no specific known workarounds for CVE-2025-39695.