Linux Kernel Vulnerability in Complex Rule Error Handling by Mellanox Technologies

CVE-2025-39768

What is CVE-2025-39768?

This vulnerability in the Linux kernel affects the handling of complex rules within Mellanox networking products. Specifically, issues arose when attempting to move rules from matcher to matcher, which could lead to serious disruptions such as soft lock-ups. The patch addresses these problems by introducing a robust error flow that ensures the kernel can continue functioning even when faced with rule transfer failures. Key improvements include aborting the rehash sequence on timeouts, maintaining error codes for clarity, and allowing for continued processing of remaining rules, effectively minimizing the potential for damage in networking environments.

References