Linux Kernel Vulnerability Related to Module Load Time in LoongArch Architecture
CVE-2025-39767

Currently unrated

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
11 September 2025

What is CVE-2025-39767?

In the Linux kernel, a performance-related vulnerability has been identified that affects the loading of modules, particularly on the LoongArch architecture. Enabling certain configurations, such as CONFIG_KASAN and CONFIG_PREEMPT_VOLUNTARY_BUILD, can lead to a soft deadlock condition during module loading. This occurs due to inefficient counting algorithms when determining the number of Procedure Linkage Tables (PLTs) and Global Offset Tables (GOTs) needed for relocations. By optimizing the sorting of the relocation list, the loading process significantly reduces module load times and alleviates the resulting CPU occupation issues. The applied patch has resolved the soft deadlock, ensuring smoother kernel operations without 'Call Trace' logs.

Affected Version(s)

Linux fcdfe9d22bed08409968a751e93112f742208be6 < 5189c0b7c251363a4dd7678ed11b054c54f36f6f

Linux fcdfe9d22bed08409968a751e93112f742208be6

Linux fcdfe9d22bed08409968a751e93112f742208be6

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-39767 : Linux Kernel Vulnerability Related to Module Load Time in LoongArch Architecture