CVE-2025-39832: net/mlx5: Fix lockdep assertion on sync reset unload event
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix lockdep assertion on sync reset unload event
Fix lockdep assertion triggered during sync reset unload event. When the sync reset flow is initiated using the devlink reload fwactivate option, the PF already holds the devlink lock while handling unload event. In this case, delegate sync reset unload event handling back to the devlink callback process to avoid double-locking and resolve the lockdep warning.
Kernel log: WARNING: CPU: 9 PID: 1578 at devlassertlocked+0x31/0x40 [...] Call Trace: <TASK> mlx5unloadonedevllocked+0x2c/0xc0 [mlx5core] mlx5syncresetunloadevent+0xaf/0x2f0 [mlx5core] processonework+0x222/0x640 workerthread+0x199/0x350 kthread+0x10b/0x230 ? pfxworkerthread+0x10/0x10 ? pfxkthread+0x10/0x10 retfromfork+0x8e/0x100 ? pfxkthread+0x10/0x10 retfromforkasm+0x1a/0x30 </TASK>
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39832?
CVE-2025-39832 does not have an assigned severity rating but affects the stability of certain operations in the Linux kernel.
How do I fix CVE-2025-39832?
To resolve CVE-2025-39832, update your Linux kernel to the latest patched version that addresses this vulnerability.
What software is affected by CVE-2025-39832?
CVE-2025-39832 affects the Linux Kernel, particularly during the sync reset unload event.
What are the potential risks of CVE-2025-39832?
The potential risks of CVE-2025-39832 include system instability and unexpected behavior during sync reset operations.
Is CVE-2025-39832 still exploitable?
CVE-2025-39832 has been resolved, and updating the kernel should mitigate any prior exploitability.