CVE-2025-39886: bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
bpf: Tell memcg to use allowspinning=false path in bpftimerinit()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.112.1-1 - Compensating control
Update the bpf_timer_init() path used when allow_spinning=false so it avoids calling cgroup_file_notify(), and use __GFP_HIGH instead of GFP_ATOMIC in __bpf_async_init().
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39886?
CVE-2025-39886 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-39886?
To fix CVE-2025-39886, update your Linux kernel to the latest version where this vulnerability has been addressed.
What types of systems are affected by CVE-2025-39886?
CVE-2025-39886 affects the Linux kernel across various distributions that rely on affected versions.
What is the impact of CVE-2025-39886?
The impact of CVE-2025-39886 includes potential locking issues during the initialization of BPF timers.
Is CVE-2025-39886 actively being exploited?
As of the last reports, there are no known active exploits specifically targeting CVE-2025-39886.