In the Linux kernel, the following vulnerability has been resolved:
eth: alx: take rtnl_lock on resume
Zbynek reports that alx trips an rtnl assertion on resume:
RTNL: assertion failed at net/core/dev.c (2891) RIP: 0010:netif_set_real_num_tx_queues+0x1ac/0x1c0 Call Trace: <TASK> __alx_open+0x230/0x570 [alx] alx_resume+0x54/0x80 [alx] ? pci_legacy_resume+0x80/0x80 dpm_run_callback+0x4a/0x150 device_resume+0x8b/0x190 async_resume+0x19/0x30 async_run_entry_fn+0x30/0x130 process_one_work+0x1e5/0x3b0
indeed the driver does not hold rtnl_lock during its internal close and re-open functions during suspend/resume. Note that this is not a huge bug as the driver implements its own locking, and does not implement changing the number of queues, but we need to silence the splat.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 6, 2025 | Oct 6, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 4, 2025 |
| Ubuntu | — | Upgrade linux-oracle-5.15Upgrade linux-realtimeUpgrade linux-aws-5.15Upgrade linux-riscv-5.15Upgrade linux-azure-fdeUpgrade linux-lowlatencyUpgrade linux-gkeUpgrade linux-intel-iotgUpgrade linux-awsUpgrade linux-lowlatency-hwe-5.15Upgrade linuxUpgrade linux-bluefieldUpgrade linux-raspiUpgrade linux-gcp-5.15Upgrade linux-ibmUpgrade linux-gkeopUpgrade linux-azure-5.15Upgrade linux-kvmUpgrade linux-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-gcpUpgrade linux-oracleUpgrade linux-azureUpgrade linux-nvidia | Oct 10, 2025 | Oct 4, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub