In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Fix lockdep warning during rmmod
The commit under the Fixes tag added a netdevassertlocked() in bnxtfreentpfltrs(). The lock should be held during normal run-time but the assert will be triggered (see below) during bnxtremoveone() which should not need the lock. The netdev is already unregistered by then. Fix it by calling netdevassertlockedor_invisible() which will not assert if the netdev is unregistered.
WARNING: CPU: 5 PID: 2241 at ./include/net/netdevlock.h:17 bnxtfreentpfltrs+0xf8/0x100 [bnxten] Modules linked in: rpcrdma rdmacm iwcm ibcm configfs ibcore bnxten(-) bridge stp llc x86pkgtempthermal xfs tg3 [last unloaded: bnxtre] CPU: 5 UID: 0 PID: 2241 Comm: rmmod Tainted: G S W 6.16.0 #2 PREEMPT(voluntary) Tainted: [S]=CPUOUTOFSPEC, [W]=WARN Hardware name: Dell Inc. PowerEdge R730/072T6D, BIOS 2.4.3 01/17/2017 RIP: 0010:bnxtfreentpfltrs+0xf8/0x100 [bnxten] Code: 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 8b 47 60 be ff ff ff ff 48 8d b8 28 0c 00 00 e8 d0 cf 41 c3 85 c0 0f 85 2e ff ff ff <0f> 0b e9 27 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffa92082387da0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff9e5b593d8000 RCX: 0000000000000001 RDX: 0000000000000001 RSI: ffffffff83dc9a70 RDI: ffffffff83e1a1cf RBP: ffff9e5b593d8c80 R08: 0000000000000000 R09: ffffffff8373a2b3 R10: 000000008100009f R11: 0000000000000001 R12: 0000000000000001 R13: ffffffffc01c4478 R14: dead000000000122 R15: dead000000000100 FS: 00007f3a8a52c740(0000) GS:ffff9e631ad1c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055bb289419c8 CR3: 000000011274e001 CR4: 00000000003706f0 Call Trace: <TASK> bnxtremoveone+0x57/0x180 [bnxten] pcideviceremove+0x39/0xc0 devicereleasedriverinternal+0xa5/0x130 driverdetach+0x42/0x90 busremovedriver+0x61/0xc0 pciunregisterdriver+0x38/0x90 bnxtexit+0xc/0x7d0 [bnxten]
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39769.json",
"cna_assigner": "Linux"
}