CVE-2025-39695

{"id": "CVE-2025-39695", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1a633bdc8fd9e9e4a9f9a668ae122edfc5aacc86", "lessThan": "732d4bd7b78a2752ad43cc39287ef41893c5eee2", "versionType": "git"}, {"status": "affected", "version": "1a633bdc8fd9e9e4a9f9a668ae122edfc5aacc86", "lessThan": "8ead139a8edef485cc36d3a792e2ae5dd538339a", "versionType": "git"}, {"status": "affected", "version": "1a633bdc8fd9e9e4a9f9a668ae122edfc5aacc86", "lessThan": "3c3e9a9f2972b364e8c2cfbfdeb23c6d6be4f87f", "versionType": "git"}], "programFiles": ["drivers/infiniband/sw/rxe/rxe_net.c", "drivers/infiniband/sw/rxe/rxe_qp.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.10"}, {"status": "unaffected", "version": "0", "lessThan": "6.10", "versionType": "semver"}, {"status": "unaffected", "version": "6.12.44", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.16.4", "versionType": "semver", "lessThanOrEqual": "6.16.*"}, {"status": "unaffected", "version": "6.17", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/infiniband/sw/rxe/rxe_net.c", "drivers/infiniband/sw/rxe/rxe_qp.c"], "defaultStatus": "affected"}]}], "published": "2025-09-05T18:15:46.380", "references": [{"url": "https://git.kernel.org/stable/c/3c3e9a9f2972b364e8c2cfbfdeb23c6d6be4f87f", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/732d4bd7b78a2752ad43cc39287ef41893c5eee2", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/8ead139a8edef485cc36d3a792e2ae5dd538339a", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Flush delayed SKBs while releasing RXE resources\n\nWhen skb packets are sent out, these skb packets still depends on\nthe rxe resources, for example, QP, sk, when these packets are\ndestroyed.\n\nIf these rxe resources are released when the skb packets are destroyed,\nthe call traces will appear.\n\nTo avoid skb packets hang too long time in some network devices,\na timestamp is added when these skb packets are created. If these\nskb packets hang too long time in network devices, these network\ndevices can free these skb packets to release rxe resources."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nRDMA/rxe: Vaciar SKBs retrasados mientras se liberan recursos RXE\n\nCuando los paquetes skb son enviados, estos paquetes skb a\u00fan dependen de los recursos rxe, por ejemplo, QP, sk, cuando estos paquetes son destruidos.\n\nSi estos recursos rxe son liberados cuando los paquetes skb son destruidos, aparecer\u00e1n las trazas de llamadas.\n\nPara evitar que los paquetes skb permanezcan colgados demasiado tiempo en algunos dispositivos de red, se a\u00f1ade una marca de tiempo cuando estos paquetes skb son creados. Si estos paquetes skb permanecen colgados demasiado tiempo en los dispositivos de red, estos dispositivos de red pueden liberar estos paquetes skb para liberar recursos rxe."}], "lastModified": "2026-10-19T21:10:00.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "489EF11B-3951-48B6-8DCA-E6B0DDAF7910", "versionEndExcluding": "6.12.44", "versionStartIncluding": "6.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AFC28995-B8C3-4B68-8CB6-78E792B6629D", "versionEndExcluding": "6.16.4", "versionStartIncluding": "6.13"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "327D22EF-390B-454C-BD31-2ED23C998A1C"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C730CD9A-D969-4A8E-9522-162AAF7C0EE9"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}