Lockdep Assertion Issue in Linux Kernel Affects Mellanox Products

CVE-2025-39832

What is CVE-2025-39832?

This vulnerability arises within the Linux kernel, specifically tied to the synchronization reset unload workflow for Mellanox products. During this process, a lock dependency assertion warning is triggered if the devlink lock is held while managing the unload event. To mitigate this issue, developers modified the handling of the sync reset unload event to ensure it is delegated back to the devlink callback process, thus preventing potential double-locking scenarios and eliminating the associated warnings in kernel logs.

References