CVE-2025-40347net: enetc: fix the deadlock of enetc_mdio_lock
- 7.5HighCVSS base score
- 0.53%Exploitation in 30 daysEPSS · top 55% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix the deadlock of enetc_mdio_lock After applying the workaround for err050089, the LS1028A platform experiences RCU stalls on RT kernel. This issue is caused by the recursive acquisition of the read lock enetc_mdio_lock. Here list some of the call stacks identified under the enetc_poll path that may lead to a deadlock: enetc_poll -> enetc_lock_mdio -> enetc_clean_rx_ring OR napi_complete_done -> napi_gro_receive -> enetc_start_xmit -> enetc_lock_mdio -> enetc_map_tx_buffs -> enetc_unlock_mdio -> enetc_unlock_mdio After enetc_poll acquires the read lock, a higher-priority writer attempts to acquire the lock, causing preemption. The writer detects that a read lock is already held and is scheduled out. However, readers under enetc_poll cannot acquire the read lock again because a writer is already waiting, leading to a thread hang. Currently, the deadlock is avoided by adjusting enetc_lock_mdio to prevent recursive lock acquisition.
Timeline
ID reserved
By Linux
- 8 months later
· 8 months later
Published
- 8 months later
· 8 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Deferred | 3.1 | High7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.53% · top 55% of all CVEs (14 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.
Affected products
- affected 6d36ecdbc4410e61a0e02adc5d3abeee22a8ffd3 – < a649161526736f48bcc592e3a412e5bcd7dd9e24
- affected 6d36ecdbc4410e61a0e02adc5d3abeee22a8ffd3 – < 2781ca82ce8cad263d80b617addb727e6a84c9e5
- affected 6d36ecdbc4410e61a0e02adc5d3abeee22a8ffd3 – < 1f92f5bd057a4fad9dab6af17963cdd21e5da6ed
- affected 6d36ecdbc4410e61a0e02adc5d3abeee22a8ffd3 – < 2e55a49dc3b2a6b23329e4fbbd8a5feb20e220aa
- affected 6d36ecdbc4410e61a0e02adc5d3abeee22a8ffd3 – < 50bd33f6b3922a6b760aa30d409cae891cec8fb5
- affected bf9c564716a13dde6a990d3b02c27cd6e39608bf
- affected ff966263f5f9fdf9740f03fed0762ce73c230a6a
- affected 5.10.24 – < 5.11
- affected 5.11.7 – < 5.12
- affected 5.12
- unaffected < 5.12
- unaffected 6.1.175 – ≤ 6.1.*
- unaffected 6.6.115 – ≤ 6.6.*
- unaffected 6.12.56 – ≤ 6.12.*
- unaffected 6.17.6 – ≤ 6.17.*
- unaffected 6.18 – ≤ *
References
References5
- https://git.kernel.org/stable/c/a649161526736f48bcc592e3a412e5bcd7dd9e24 (opens in a new tab)
- https://git.kernel.org/stable/c/2781ca82ce8cad263d80b617addb727e6a84c9e5 (opens in a new tab)
- https://git.kernel.org/stable/c/1f92f5bd057a4fad9dab6af17963cdd21e5da6ed (opens in a new tab)
- https://git.kernel.org/stable/c/2e55a49dc3b2a6b23329e4fbbd8a5feb20e220aa (opens in a new tab)
- https://git.kernel.org/stable/c/50bd33f6b3922a6b760aa30d409cae891cec8fb5 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2025-203640 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2025-40347)Record last updated .