UBUNTU-CVE-2026-97956: Medium severity ubuntu/linux-hwe-edge vulnerability
In the Linux kernel, the following vulnerability has been resolved: net: netfailover: Fix the deadlock in netfailoverslavenamechange() This is a sibling fix of commit b84c5632c7b3 ("net: netfailover: Fix the deadlock in slave register"). There is netdevlockops() in the upper callers, so using netifopen() instead of devopen(). Call Trace: schedule+0x2bb/0x650 schedule+0x27/0xb0 schedulepreemptdisabled+0x15/0x30 mutexlock.constprop.0+0x550/0xaf0 mutexlockslowpath+0x13/0x20 mutexlock+0x3b/0x50 devopen+0x3b/0xe0 netfailoverslavenamechange+0x22/0x40 failoverevent+0xd4/0x1e0 notifiercallchain+0x62/0xf0 rawnotifiercallchain+0x16/0x30 callnetdevicenotifiersinfo+0x50/0x80 netifchangename+0x200/0x330 dosetlink.isra.0+0xb12/0xdf0 ? securitycapable+0x9a/0x1e0 ? nscapable+0x31/0x60 rtnlsetlink+0x302/0x670 ? netlinkrecvmsg+0x296/0x340 ? securitycapable+0x9a/0x1e0 ? pfxrtnlsetlink+0x10/0x10 rtnetlinkrcvmsg+0x384/0x460 ? pfxrtnetlinkrcvmsg+0x10/0x10 netlinkrcvskb+0x61/0x120 rtnetlinkrcv+0x15/0x30 netlinkunicast+0x28f/0x3c0 netlinksendmsg+0x216/0x450 syssendto+0x222/0x230 x64syssendto+0x24/0x40 x64syscall+0x1d5d/0x2390 dosyscall64+0x105/0x5a0 ? dosyscall64+0x140/0x5a0 ? excpagefault+0x94/0x1e0 entrySYSCALL64afterhwframe+0x76/0x7e
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-hwe-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1~24.04.1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 7.0.0-42.42 - Upgrade
Upgrade
ubuntu/linux-awsto a version that resolves this vulnerability.Fixed in 7.0.0-1016.17 - Upgrade
Upgrade
ubuntu/linux-gcpto a version that resolves this vulnerability.Fixed in 7.0.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-ibmto a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oem-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oracleto a version that resolves this vulnerability.Fixed in 7.0.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-riscvto a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1
Event History
Frequently Asked Questions
Which systems are most likely to be affected?
Systems running one of the listed Ubuntu kernel packages are relevant when they use net_failover and rename a failover slave network device. The issue is a deadlock in the slave name-change path.
What action triggers the problem?
The supplied call trace shows the deadlock occurring during a network-device rename handled through rtnetlink, reaching net_failover_slave_name_change(). The problematic path calls dev_open() while the relevant lock is already held.
What can be done if the fix cannot be deployed immediately?
Avoid renaming net_failover slave interfaces, as this is the operation associated with the deadlock. No other workaround is provided in the available data.
How can I recognize this issue on an affected host?
A blocked task or kernel trace may include net_failover_slave_name_change(), dev_open(), mutex_lock(), and scheduling functions such as __schedule or schedule. The trace may also show the rename path through netif_change_name(), rtnl_setlink(), and rtnetlink_rcv_msg().