Vulnerability in Linux Kernel Affects Network Device Operations

CVE-2025-39908

What is CVE-2025-39908?

A vulnerability exists within the Linux kernel concerning the handling of hardware timestamping callbacks (hwtstamp). Specifically, the issue arises from the inconsistent management of the operations lock during the execution of get/set paths in network device operations. This discrepancy can result in improper locking mechanisms leading to unforeseen behavior during driver interactions. The affected functions, including mlx5_hwtstamp_set and mlx5e_hwtstamp_set, are crucial for network timestamps but are linked to a patch currently in development and may not be available in mainline sources yet. The kernel debug log warns of potential stability risks, emphasizing the need for immediate assessments and updates.

References