CVE-2025-37859

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

page_pool: avoid infinite loop to schedule delayed worker

We noticed the kworker in page_pool_release_retry() was waken

up repeatedly and infinitely in production because of the

buggy driver causing the inflight less than 0 and warning

us in page_pool_inflight()[1].

Since the inflight value goes negative, it means we should

not expect the whole page_pool to get back to work normally.

This patch mitigates the adverse effect by not rescheduling

the kworker when detecting the inflight negative in

page_pool_release_retry().

[1]

[Mon Feb 10 20:36:11 2025] ------------[ cut here ]------------

[Mon Feb 10 20:36:11 2025] Negative(-51446) inflight packet-pages

...

[Mon Feb 10 20:36:11 2025] Call Trace:

[Mon Feb 10 20:36:11 2025] page_pool_release_retry+0x23/0x70

[Mon Feb 10 20:36:11 2025] process_one_work+0x1b1/0x370

[Mon Feb 10 20:36:11 2025] worker_thread+0x37/0x3a0

[Mon Feb 10 20:36:11 2025] kthread+0x11a/0x140

[Mon

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References