SB2025082074 - Improper locking in Linux kernel emulex benet driver
Published: August 20, 2025
Security Bulletin ID
SB2025082074
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper locking (CVE-ID: CVE-2025-38569)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper locking within the be_cmd_set_mac_list() function in drivers/net/ethernet/emulex/benet/be_cmds.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/0ddfe8b127ef1149fddccb79db6e6eaba7738e7d
- https://git.kernel.org/stable/c/46d44a23a3723a89deeb65b13cddb17f8d9f2700
- https://git.kernel.org/stable/c/5a40f8af2ba1b9bdf46e2db10e8c9710538fbc63
- https://git.kernel.org/stable/c/c377ba2be9430d165a98e4b782902ed630bc7546
- https://git.kernel.org/stable/c/d5dc09ee5d74277bc47193fe28ce8703e229331b
- https://git.kernel.org/stable/c/f4e4e0c4bc4d799d6fa39055acdbc3af066cd13e