CVE-2025-39736
Description
In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock When netpoll is enabled, calling pr_warn_once() while holding kmemleak_lock in mem_pool_alloc() can cause a deadlock due to lock inversion with the netconsole subsystem. This occurs because pr_warn_once() may trigger netpoll, which eventually leads to __alloc_skb() and back into kmemleak code, attempting to reacquire kmemleak_lock. This is the path for the deadlock. mem_pool_alloc() -> raw_spin_lock_irqsave(&kmemleak_lock, flags); -> pr_warn_once() -> netconsole subsystem -> netpoll -> __alloc_skb -> __create_object -> raw_spin_lock_irqsave(&kmemleak_lock, flags); Fix this by setting a flag and issuing the pr_warn_once() after kmemleak_lock is released.
How to fix
- linux linux_kernel5.4.297, 5.10.241, 5.15.190, 6.1.149, 6.6.103, 6.12.43, 6.15.11, 6.16.2 or later
- git.kernel.org/stable/c/08f70be5e406ce47c822f2dd11c1170ca259605b
- git.kernel.org/stable/c/1da95d3d4b7b1d380ebd87b71a61e7e6aed3265d
- git.kernel.org/stable/c/47b0f6d8f0d2be4d311a49e13d2fd5f152f492b2
- git.kernel.org/stable/c/4b0151e1d468eb2667c37b7af99b3c075072d334
- git.kernel.org/stable/c/62879faa8efe8d8a9c7bf7606ee9c068012d7dac
- git.kernel.org/stable/c/a0854de00ce2ee27edf39037e7836ad580eb3350
- git.kernel.org/stable/c/a181b228b37a6a5625dad2bb4265bb7abb673e9f
- git.kernel.org/stable/c/c7b6ea0ede687e7460e593c5ea478f50aa41682a
- git.kernel.org/stable/c/f249d32bb54876b4b6c3ae071af8ddca77af390b
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 5.4 ≤ v < 5.4.297, 5.5 ≤ v < 5.10.241, 5.11 ≤ v < 5.15.190, 5.16 ≤ v < 6.1.149, 6.2 ≤ v < 6.6.103, 6.7 ≤ v < 6.12.43, 6.13 ≤ v < 6.15.11, 6.16 ≤ v < 6.16.2, 6.17 | 5.4.297, 5.10.241, 5.15.190, 6.1.149, 6.6.103, 6.12.43, 6.15.11, 6.16.2 |
| debian debian_linux | 11.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.