CVE-2025-21801

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net: ravb: Fix missing rtnl lock in suspend/resume path

Fix the suspend/resume path by ensuring the rtnl lock is held where

required. Calls to ravb_open, ravb_close and wol operations must be

performed under the rtnl lock to prevent conflicts with ongoing ndo

operations.

Without this fix, the following warning is triggered:

[ 39.032969] =============================

[ 39.032983] WARNING: suspicious RCU usage

[ 39.033019] -----------------------------

[ 39.033033] drivers/net/phy/phy_device.c:2004 suspicious

rcu_dereference_protected() usage!

...

[ 39.033597] stack backtrace:

[ 39.033613] CPU: 0 UID: 0 PID: 174 Comm: python3 Not tainted

6.13.0-rc7-next-20250116-arm64-renesas-00002-g35245dfdc62c #7

[ 39.033623] Hardware name: Renesas SMARC EVK version 2 based on

r9a08g045s33 (DT)

[ 39.033628] Call trace:

[ 39.033633] show_stack+0x14/0x1c (C)

[ 39.033652] dump_stack_lvl+0xb4/0xc4

[ 39.033664] d

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References