CVE-2025-39947
- Source
- https://cve.org/CVERecord?id=CVE-2025-39947
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39947.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-39947
- Downstream
- Related
- Published
- 2025-10-04T07:31:08.636Z
- Modified
- 2026-05-13T03:52:39.621059959Z
- Summary
- net/mlx5e: Harden uplink netdev access against device unbind
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Harden uplink netdev access against device unbind
The function mlx5uplinknetdevget() gets the uplink netdevice pointer from mdev->mlx5eres.uplinknetdev. However, the netdevice can be removed and its pointer cleared when unbound from the mlx5core.eth driver. This results in a NULL pointer, causing a kernel panic.
BUG: unable to handle page fault for address: 0000000000001300 at RIP: 0010:mlx5evportrepload+0x22a/0x270 [mlx5core] Call Trace: <TASK> mlx5eswoffloadsrepload+0x68/0xe0 [mlx5core] eswoffloadsenable+0x593/0x910 [mlx5core] mlx5eswitchenablelocked+0x341/0x420 [mlx5core] mlx5devlinkeswitchmodeset+0x17e/0x3a0 [mlx5core] devlinknleswitchsetdoit+0x60/0xd0 genlfamilyrcvmsgdoit+0xe0/0x130 genlrcvmsg+0x183/0x290 netlinkrcvskb+0x4b/0xf0 genlrcv+0x24/0x40 netlinkunicast+0x255/0x380 netlinksendmsg+0x1f3/0x420 __sock_sendmsg+0x38/0x60 _syssendto+0x119/0x180 dosyscall64+0x53/0x1d0 entrySYSCALL64afterhwframe+0x4b/0x53
Ensure the pointer is valid before use by checking it for NULL. If it is valid, immediately call netdev_hold() to take a reference, and preventing the netdevice from being freed while it is in use.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39947.json" }- References
-
- https://git.kernel.org/stable/c/2cb17c88edd3a1c7aa6bc880dcdb35a6866fcb2e
- https://git.kernel.org/stable/c/6b4be64fd9fec16418f365c2d8e47a7566e9eba5
- https://git.kernel.org/stable/c/8df354eb2dd63d111ed5ae2e956e0dbb22bcf93b
- https://git.kernel.org/stable/c/d1f3db4e7a3be29fc17f01850f162363f919370d
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39947.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-39947
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced7a9fb35e8c3a67145fca262c304de65cb2f83abfFixed2cb17c88edd3a1c7aa6bc880dcdb35a6866fcb2eFixedd1f3db4e7a3be29fc17f01850f162363f919370dFixed8df354eb2dd63d111ed5ae2e956e0dbb22bcf93bFixed6b4be64fd9fec16418f365c2d8e47a7566e9eba5