CVE-2025-39832

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: Fix lockdep assertion on sync reset unload event

Fix lockdep assertion triggered during sync reset unload event. When the

sync reset flow is initiated using the devlink reload fw_activate

option, the PF already holds the devlink lock while handling unload

event. In this case, delegate sync reset unload event handling back to

the devlink callback process to avoid double-locking and resolve the

lockdep warning.

Kernel log:

WARNING: CPU: 9 PID: 1578 at devl_assert_locked+0x31/0x40

[...]

Call Trace:

<TASK>

mlx5_unload_one_devl_locked+0x2c/0xc0 [mlx5_core]

mlx5_sync_reset_unload_event+0xaf/0x2f0 [mlx5_core]

process_one_work+0x222/0x640

worker_thread+0x199/0x350

kthread+0x10b/0x230

? __pfx_worker_thread+0x10/0x10

? __pfx_kthread+0x10/0x10

ret_from_fork+0x8e/0x100

? __pfx_kthread+0x10/0x10

ret_from_fork_asm+0x1a/0x30

</TASK>

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References