{"id":"DEBIAN-CVE-2025-38392","details":"In the Linux kernel, the following vulnerability has been resolved:  idpf: convert control queue mutex to a spinlock  With VIRTCHNL2_CAP_MACFILTER enabled, the following warning is generated on module load:  [  324.701677] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578 [  324.701684] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 1582, name: NetworkManager [  324.701689] preempt_count: 201, expected: 0 [  324.701693] RCU nest depth: 0, expected: 0 [  324.701697] 2 locks held by NetworkManager/1582: [  324.701702]  #0: ffffffff9f7be770 (rtnl_mutex){....}-{3:3}, at: rtnl_newlink+0x791/0x21e0 [  324.701730]  #1: ff1100216c380368 (_xmit_ETHER){....}-{2:2}, at: __dev_open+0x3f0/0x870 [  324.701749] Preemption disabled at: [  324.701752] [\u003cffffffff9cd23b9d\u003e] __dev_open+0x3dd/0x870 [  324.701765] CPU: 30 UID: 0 PID: 1582 Comm: NetworkManager Not tainted 6.15.0-rc5+ #2 PREEMPT(voluntary) [  324.701771] Hardware name: Intel Corporation M50FCP2SBSTD/M50FCP2SBSTD, BIOS SE5C741.86B.01.01.0001.2211140926 11/14/2022 [  324.701774] Call Trace: [  324.701777]  \u003cTASK\u003e [  324.701779]  dump_stack_lvl+0x5d/0x80 [  324.701788]  ? __dev_open+0x3dd/0x870 [  324.701793]  __might_resched.cold+0x1ef/0x23d \u003c..\u003e [  324.701818]  __mutex_lock+0x113/0x1b80 \u003c..\u003e [  324.701917]  idpf_ctlq_clean_sq+0xad/0x4b0 [idpf] [  324.701935]  ? kasan_save_track+0x14/0x30 [  324.701941]  idpf_mb_clean+0x143/0x380 [idpf] \u003c..\u003e [  324.701991]  idpf_send_mb_msg+0x111/0x720 [idpf] [  324.702009]  idpf_vc_xn_exec+0x4cc/0x990 [idpf] [  324.702021]  ? rcu_is_watching+0x12/0xc0 [  324.702035]  idpf_add_del_mac_filters+0x3ed/0xb50 [idpf] \u003c..\u003e [  324.702122]  __hw_addr_sync_dev+0x1cf/0x300 [  324.702126]  ? find_held_lock+0x32/0x90 [  324.702134]  idpf_set_rx_mode+0x317/0x390 [idpf] [  324.702152]  __dev_open+0x3f8/0x870 [  324.702159]  ? __pfx___dev_open+0x10/0x10 [  324.702174]  __dev_change_flags+0x443/0x650 \u003c..\u003e [  324.702208]  netif_change_flags+0x80/0x160 [  324.702218]  do_setlink.isra.0+0x16a0/0x3960 \u003c..\u003e [  324.702349]  rtnl_newlink+0x12fd/0x21e0  The sequence is as follows: \trtnl_newlink()-\u003e \t__dev_change_flags()-\u003e \t__dev_open()-\u003e \tdev_set_rx_mode() - \u003e  # disables BH and grabs \"dev-\u003eaddr_list_lock\" \tidpf_set_rx_mode() -\u003e  # proceed only if VIRTCHNL2_CAP_MACFILTER is ON \t__dev_uc_sync() -\u003e \tidpf_add_mac_filter -\u003e \tidpf_add_del_mac_filters -\u003e \tidpf_send_mb_msg() -\u003e \tidpf_mb_clean() -\u003e \tidpf_ctlq_clean_sq()   # mutex_lock(cq_lock)  Fix by converting cq_lock to a spinlock. All operations under the new lock are safe except freeing the DMA memory, which may use vunmap(). Fix by requesting a contiguous physical memory for the DMA mapping.","modified":"2026-08-27T23:05:21.823738963Z","published":"2025-07-25T13:15:28.617Z","upstream":["CVE-2025-38392"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2025-38392"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.37-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2025-38392.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.37-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2025-38392.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}