CVE-2025-39832

net/mlx5: Fix lockdep assertion on sync reset unload event

State: Published
Severity: 5.5 Medium
Published: Sep 16, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: Fix lockdep assertion on sync reset unload event

Fix lockdep assertion triggered during sync reset unload event. When the sync reset flow is initiated using the devlink reload fw_activate option, the PF already holds the devlink lock while handling unload event. In this case, delegate sync reset unload event handling back to the devlink callback process to avoid double-locking and resolve the lockdep warning.

Kernel log: WARNING: CPU: 9 PID: 1578 at devl_assert_locked+0x31/0x40 [...] Call Trace: <TASK> mlx5_unload_one_devl_locked+0x2c/0xc0 [mlx5_core] mlx5_sync_reset_unload_event+0xaf/0x2f0 [mlx5_core] process_one_work+0x222/0x640 worker_thread+0x199/0x350 kthread+0x10b/0x230 ? __pfx_worker_thread+0x10/0x10 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x8e/0x100 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK>

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-667 Improper Locking

Affected Products

Product	Versions
LinuxLinux	7a9770f1bfeaeddf5afabd3244e2c4c4966be37d to before ddac9d0fe2493dd550cbfc75eeaf31e9b6dac959Affected 7a9770f1bfeaeddf5afabd3244e2c4c4966be37d to before 0c87dba9ccd3801d3b503f0b4fd41be343af4f06Affected 7a9770f1bfeaeddf5afabd3244e2c4c4966be37d to before 06d897148e79638651800d851a69547b56b4be2eAffected 7a9770f1bfeaeddf5afabd3244e2c4c4966be37d to before 902a8bc23a24882200f57cadc270e15a2cfaf2bbAffected
LinuxLinux	6.5Affected before 6.5Not affected 6.6.104 through 6.6.Not affected 6.12.45 through 6.12.Not affected 6.16.5 through 6.16.*Not affected 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.