Deadlock Issue in Linux Kernel's hibmcge Network Driver by Vendor

CVE-2025-38720

What is CVE-2025-38720?

A deadlock vulnerability has been identified in the hibmcge network driver within the Linux kernel, which manages resource locking during PCI error handling. This issue arises when functions attempt to acquire the rtnl_lock sequentially during device reset processes, leading to potential system halts. The employed driver management has been adjusted to detach network devices prior to reset operations, eliminating the need for concurrent locking. The released patch ensures that multiple resets don't occur at the same time, thereby enhancing overall system reliability.

References