CVE-2025-39733

In the Linux kernel, the following vulnerability has been resolved: team: replace team lock with rtnl lock syszbot reports various ordering issues for lower instance locks and team lock. Switch to using rtnl lock for protecting team device, similar to bonding. Based on the patch by Tetsuo Handa.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/53edc761c9911f597b6d701e846f6e84f15eaa6d	Patch
https://git.kernel.org/stable/c/556a4337ba3e9a70e1e3a428e8465c3ea3c4aa41	Patch
https://git.kernel.org/stable/c/bfb4fb77f9a8ce33ce357224569eae5564eec573	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel:6.15:-::::::

History

19 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: team: reemplazar el bloqueo de team con el bloqueo rtnl syszbot informa de varios problemas de ordenación para los bloqueos de instancias inferiores y el bloqueo de team. Cambiar al uso del bloqueo rtnl para proteger el dispositivo team, similar a bonding. Basado en el parche de Tetsuo Handa.

Information

Published : 2025-09-07 16:15

Updated : 2026-10-19 21:10

NVD link : CVE-2025-39733

Mitre link : CVE-2025-39733

CVE.ORG link : CVE-2025-39733

JSON object : View

Products Affected

linux

linux_kernel

CWE

NVD-CWE-noinfo

{"id": "CVE-2025-39733", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6b1d3c5f675cc794a015138b115afff172fb4c58", "lessThan": "556a4337ba3e9a70e1e3a428e8465c3ea3c4aa41", "versionType": "git"}, {"status": "affected", "version": "6b1d3c5f675cc794a015138b115afff172fb4c58", "lessThan": "53edc761c9911f597b6d701e846f6e84f15eaa6d", "versionType": "git"}, {"status": "affected", "version": "6b1d3c5f675cc794a015138b115afff172fb4c58", "lessThan": "bfb4fb77f9a8ce33ce357224569eae5564eec573", "versionType": "git"}], "programFiles": ["drivers/net/team/team_core.c", "drivers/net/team/team_mode_activebackup.c", "drivers/net/team/team_mode_loadbalance.c", "include/linux/if_team.h"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.15"}, {"status": "unaffected", "version": "0", "lessThan": "6.15", "versionType": "semver"}, {"status": "unaffected", "version": "6.15.10", "versionType": "semver", "lessThanOrEqual": "6.15.*"}, {"status": "unaffected", "version": "6.16.1", "versionType": "semver", "lessThanOrEqual": "6.16.*"}, {"status": "unaffected", "version": "6.17", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/team/team_core.c", "drivers/net/team/team_mode_activebackup.c", "drivers/net/team/team_mode_loadbalance.c", "include/linux/if_team.h"], "defaultStatus": "affected"}]}], "published": "2025-09-07T16:15:50.180", "references": [{"url": "https://git.kernel.org/stable/c/53edc761c9911f597b6d701e846f6e84f15eaa6d", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/556a4337ba3e9a70e1e3a428e8465c3ea3c4aa41", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/bfb4fb77f9a8ce33ce357224569eae5564eec573", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nteam: replace team lock with rtnl lock\n\nsyszbot reports various ordering issues for lower instance locks and\nteam lock. Switch to using rtnl lock for protecting team device,\nsimilar to bonding. Based on the patch by Tetsuo Handa."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nteam: reemplazar el bloqueo de team con el bloqueo rtnl\n\nsyszbot informa de varios problemas de ordenaci\u00f3n para los bloqueos de instancias inferiores y el bloqueo de team. Cambiar al uso del bloqueo rtnl para proteger el dispositivo team, similar a bonding. Basado en el parche de Tetsuo Handa."}], "lastModified": "2026-10-19T21:10:00.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0FAA526-11E9-4121-9B4F-1173E86F5543", "versionEndExcluding": "6.15.10", "versionStartIncluding": "6.15.1"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58182352-D7DF-4CC9-841E-03C1D852C3FB", "versionEndExcluding": "6.16.1", "versionStartIncluding": "6.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1ECC65A-EE37-4479-8E99-4BB68A22A31F"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}