Locking Dependency Issue in the Linux Kernel for AX.25 Protocol

CVE-2025-21812

Summary

A significant locking dependency issue in the Linux kernel exists within the AX.25 protocol implementation. This vulnerability is associated with potential race conditions and use-after-free scenarios that can arise when manipulating socket options. The root cause stems from improper dependencies between locks, creating an unsafe locking situation that may lead to deadlocks. Proper mitigation involves removing the dependency on RTNL in the ax25_setsockopt function, effectively addressing multiple potential vulnerabilities related to resource management in network configurations.

References