CVE-2025-40347

High

Description

In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix the deadlock of enetc_mdio_lock After applying the workaround for err050089, the LS1028A platform experiences RCU stalls on RT kernel. This issue is caused by the recursive acquisition of the read lock enetc_mdio_lock. Here list some of the call stacks identified under the enetc_poll path that may lead to a deadlock: enetc_poll -> enetc_lock_mdio -> enetc_clean_rx_ring OR napi_complete_done -> napi_gro_receive -> enetc_start_xmit -> enetc_lock_mdio -> enetc_map_tx_buffs -> enetc_unlock_mdio -> enetc_unlock_mdio After enetc_poll acquires the read lock, a higher-priority writer attempts to acquire the lock, causing preemption. The writer detects that a read lock is already held and is scheduled out. However, readers under enetc_poll cannot acquire the read lock again because a writer is already waiting, leading to a thread hang. Currently, the deadlock is avoided by adjusting enetc_lock_mdio to prevent recursive lock acquisition.

SeverityHigh
CVSS7.5
Exploit probability—
ProductLinux
PublishedDec 16, 2025
First seenDec 16, 2025

How to fix

Update
  • Linux Linuxa649161526736f48bcc592e3a412e5bcd7dd9e24, 2781ca82ce8cad263d80b617addb727e6a84c9e5, 1f92f5bd057a4fad9dab6af17963cdd21e5da6ed, 2e55a49dc3b2a6b23329e4fbbd8a5feb20e220aa, 50bd33f6b3922a6b760aa30d409cae891cec8fb5, 5.11, 5.12 or later

Affected products

ProductAffected versionsFixed in
Linux Linux6d36ecdbc4410e61a0e02adc5d3abeee22a8ffd3 ≤ v < a649161526736f48bcc592e3a412e5bcd7dd9e24, 6d36ecdbc4410e61a0e02adc5d3abeee22a8ffd3 ≤ v < 2781ca82ce8cad263d80b617addb727e6a84c9e5, 6d36ecdbc4410e61a0e02adc5d3abeee22a8ffd3 ≤ v < 1f92f5bd057a4fad9dab6af17963cdd21e5da6ed, 6d36ecdbc4410e61a0e02adc5d3abeee22a8ffd3 ≤ v < 2e55a49dc3b2a6b23329e4fbbd8a5feb20e220aa, 6d36ecdbc4410e61a0e02adc5d3abeee22a8ffd3 ≤ v < 50bd33f6b3922a6b760aa30d409cae891cec8fb5, bf9c564716a13dde6a990d3b02c27cd6e39608bf, ff966263f5f9fdf9740f03fed0762ce73c230a6a, 5.10.24 ≤ v < 5.11, 5.11.7 ≤ v < 5.12, 5.12a649161526736f48bcc592e3a412e5bcd7dd9e24, 2781ca82ce8cad263d80b617addb727e6a84c9e5, 1f92f5bd057a4fad9dab6af17963cdd21e5da6ed, 2e55a49dc3b2a6b23329e4fbbd8a5feb20e220aa, 50bd33f6b3922a6b760aa30d409cae891cec8fb5, 5.11, 5.12

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.