CVE-2025-39736

Source
https://cve.org/CVERecord?id=CVE-2025-39736
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39736.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-39736
Downstream
Published
2025-09-11T16:52:11.772Z
Modified
2026-03-20T12:43:02.019507Z
Summary
mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
Details

In the Linux kernel, the following vulnerability has been resolved:

mm/kmemleak: avoid deadlock by moving prwarn() outside kmemleaklock

When netpoll is enabled, calling prwarnonce() while holding kmemleaklock in mempoolalloc() can cause a deadlock due to lock inversion with the netconsole subsystem. This occurs because prwarn_once() may trigger netpoll, which eventually leads to __allocskb() and back into kmemleak code, attempting to reacquire kmemleaklock.

This is the path for the deadlock.

mempoolalloc() -> rawspinlockirqsave(&kmemleaklock, flags); -> prwarnonce() -> netconsole subsystem -> netpoll -> __alloc_skb -> _createobject -> rawspinlockirqsave(&kmemleaklock, flags);

Fix this by setting a flag and issuing the prwarnonce() after kmemleak_lock is released.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39736.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c5665868183fec689dbab9fb8505188b2c4f0757
Fixed
c7b6ea0ede687e7460e593c5ea478f50aa41682a
Fixed
4b0151e1d468eb2667c37b7af99b3c075072d334
Fixed
f249d32bb54876b4b6c3ae071af8ddca77af390b
Fixed
62879faa8efe8d8a9c7bf7606ee9c068012d7dac
Fixed
1da95d3d4b7b1d380ebd87b71a61e7e6aed3265d
Fixed
a0854de00ce2ee27edf39037e7836ad580eb3350
Fixed
08f70be5e406ce47c822f2dd11c1170ca259605b
Fixed
a181b228b37a6a5625dad2bb4265bb7abb673e9f
Fixed
47b0f6d8f0d2be4d311a49e13d2fd5f152f492b2

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39736.json"