In the Linux kernel, the following vulnerability has been resolved:
net: ibmveth: make veth_pool_store stop hanging
v2: - Created a single error handling unlock and exit in veth_pool_store - Greatly expanded commit message with previous explanatory-only text
Summary: Use rtnl_mutex to synchronize veth_pool_store with itself, ibmveth_close and ibmveth_open, preventing multiple calls in a row to napi_disable.
Background: Two (or more) threads could call veth_pool_store through writing to /sys/devices/vio/30000002/pool*/*. You can do this easily with a little shell script. This causes a hang.
I configured LOCKDEP, compiled ibmveth.c with DEBUG, and built a new kernel. I ran this test again and saw:
Setting pool0/active to 0 Setting pool1/active to 1 [ 73.911067][ T4365] ibmveth 30000002 eth0: close starting Setting pool1/active to 1 Setting pool1/active to 0 [ 73.911367][ T4366] ibmveth 30000002 eth0: close starting [ 73.916056][ T4365] ibmveth 30000002 eth0: close complete [ 73.916064][ T4365] ibmveth 30000002 eth0: open starting [ 110.808564][ T712] systemd-journald[712]: Sent WATCHDOG=1 notification. [ 230.808495][ T712] systemd-journald[712]: Sent WATCHDOG=1 notification. [ 243.683786][ T123] INFO: task stress.sh:4365 blocked for more than 122 seconds. [ 243.683827][ T123] Not tainted 6.14.0-01103-g2df0c02dab82-dirty #8 [ 243.683833][ T123] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 243.683838][ T123] task:stress.sh state:D stack:28096 pid:4365 tgid:4365 ppid:4364 task_flags:0x400040 flags:0x00042000 [ 243.683852][ T123] Call Trace: [ 243.683857][ T123] [c00000000c38f690] [0000000000000001] 0x1 (unreliable) [ 243.683868][ T123] [c00000000c38f840] [c00000000001f908] __switch_to+0x318/0x4e0 [ 243.683878][ T123] [c00000000c38f8a0] [c000000001549a70] __schedule+0x500/0x12a0 [ 243.683888][ T123] [c00000000c38f9a0] [c00000000154a878] schedule+0x68/0x210 [ 243.683896][ T123] [c00000000c38f9d0] [c00000000154ac80] schedule_preempt_disabled+0x30/0x50 [ 243.683904][ T123] [c00000000c38fa00] [c00000000154dbb0] __mutex_lock+0x730/0x10f0 [ 243.683913][ T123] [c00000000c38fb10] [c000000001154d40] napi_enable+0x30/0x60 [ 243.683921][ T123] [c00000000c38fb40] [c000000000f4ae94] ibmveth_open+0x68/0x5dc [ 243.683928][ T123] [c00000000c38fbe0] [c000000000f4aa20] veth_pool_store+0x220/0x270 [ 243.683936][ T123] [c00000000c38fc70] [c000000000826278] sysfs_kf_write+0x68/0xb0 [ 243.683944][ T123] [c00000000c38fcb0] [c0000000008240b8] kernfs_fop_write_iter+0x198/0x2d0 [ 243.683951][ T123] [c00000000c38fd00] [c00000000071b9ac] vfs_write+0x34c/0x650 [ 243.683958][ T123] [c00000000c38fdc0] [c00000000071bea8] ksys_write+0x88/0x150 [ 243.683966][ T123] [c00000000c38fe10] [c0000000000317f4] system_call_exception+0x124/0x340 [ 243.683973][ T123] [c00000000c38fe50] [c00000000000d05c] system_call_vectored_common+0x15c/0x2ec ... [ 243.684087][ T123] Showing all locks held in the system: [ 243.684095][ T123] 1 lock held by khungtaskd/123: [ 243.684099][ T123] #0: c00000000278e370 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x50/0x248 [ 243.684114][ T123] 4 locks held by stress.sh/4365: [ 243.684119][ T123] #0: c00000003a4cd3f8 (sb_writers#3){.+.+}-{0:0}, at: ksys_write+0x88/0x150 [ 243.684132][ T123] #1: c000000041aea888 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x154/0x2d0 [ 243.684143][ T123] #2: c0000000366fb9a8 (kn->active#64){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x160/0x2d0 [ 243.684155][ T123] #3: c000000035ff4cb8 (&dev->lock){+.+.}-{3:3}, at: napi_enable+0x30/0x60 [ 243.684166][ T123] 5 locks held by stress.sh/4366: [ 243.684170][ T123] #0: c00000003a4cd3f8 (sb_writers#3){.+.+}-{0:0}, at: ksys_write+0x88/0x150 [ 243. ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Apr 16, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade kernel-obs-qaUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-armUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade dtb-appleUpgrade reiserfs-kmp-azureUpgrade kernel-default-manUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-marvellUpgrade dtb-renesasUpgrade dtb-apmUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-rt_debugUpgrade kernel-64kb-develUpgrade kselftests-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade dtb-lgUpgrade dtb-broadcomUpgrade kernel-azureUpgrade kernel-rtUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kernel-64kb-optionalUpgrade dtb-qcomUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-rt_debug-develUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-source | Dec 5, 2025 | May 20, 2025 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-1039-ibmUpgrade linux-image-aws-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1038-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1041-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1025-gkeopUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-6.8.0-1041-nvidia-lowlatencyUpgrade linux-image-azure-fde-6.11Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-2032-raspi-realtimeUpgrade linux-image-6.8.0-86-genericUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-1041-azureUpgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-6.8.0-86-lowlatency-64kUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-azure-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1038-oracle-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-gcp-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1042-gcp-64kUpgrade linux-image-aws-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azureUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.1-1036-realtimeUpgrade linux-image-awsUpgrade linux-image-lowlatency-6.11Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-kvmUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.8.0-1041-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1041-aws-64kUpgrade linux-image-6.8.0-86-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-6.11Upgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1038-oracleUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-1041-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1042-gcpUpgrade linux-image-6.8.0-1038-gke-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-edgeUpgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-6.8.0-1041-nvidia-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1041-raspiUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-ibmUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-86-lowlatency | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub