CVE-2025-40347

kernel: net: enetc: fix the deadlock of enetc_mdio_lock

Loading…

Severity

Important

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · December 16, 2025

Updated · July 30, 2026

Description

A deadlock vulnerability was found in the NXP ENETC network driver in the Linux kernel. On RT kernels with the err050089 workaround, recursive acquisition of enetc_mdio_lock occurs when the TX path is invoked from within the RX NAPI poll context. This causes RCU stalls and system hangs.

Statement

This specifically affects NXP LS1028A platforms running RT (PREEMPT_RT) kernels. Standard kernels and other platforms are unaffected. The deadlock causes complete system hang.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-764 · Multiple Locks of a Critical Resource