Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2025-40164— usbnet: Fix using smp_processor_id() in preemptible code warnings

AI Predicted 3.3 Difficulty: Trivial EPSS 0.18% · P8

Possible ATT&CK Techniques 1AI

T1564.004 · NTFS File Attributes

Affected Version Matrix 16

VendorProductVersion RangeStatus
LinuxLinux43daa96b166c3cf5ff30dfac0c5efa2620e4beab< 6635e52bc4165793aefd686962d912d73d323afeaffected
43daa96b166c3cf5ff30dfac0c5efa2620e4beab< 65d04291adf7c59338f87aab9c6fe0bfa9993e64affected
43daa96b166c3cf5ff30dfac0c5efa2620e4beab< f45fffae5e2549bd0a4670cc52a15ad54c9f121eaffected
43daa96b166c3cf5ff30dfac0c5efa2620e4beab< 17fbad93879e87a334062882b45fa727ba1b3dd7affected
43daa96b166c3cf5ff30dfac0c5efa2620e4beab< d1944bab8e0c1511f0cbf364aa06547735bb0ddbaffected
43daa96b166c3cf5ff30dfac0c5efa2620e4beab< 0134c7bff14bd50314a4f92b182850ddfc38e255affected
43daa96b166c3cf5ff30dfac0c5efa2620e4beab< 327cd4b68b4398b6c24f10eb2b2533ffbfc10185affected
4.7affected
… +8 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2025-40164

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
usbnet: Fix using smp_processor_id() in preemptible code warnings
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smp_processor_id() in preemptible code warnings Syzbot reported the following warning: BUG: using smp_processor_id() in preemptible [00000000] code: dhcpcd/2879 caller is usbnet_skb_return+0x74/0x490 drivers/net/usb/usbnet.c:331 CPU: 1 UID: 0 PID: 2879 Comm: dhcpcd Not tainted 6.15.0-rc4-syzkaller-00098-g615dca38c2ea #0 PREEMPT(voluntary) Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120 check_preemption_disabled+0xd0/0xe0 lib/smp_processor_id.c:49 usbnet_skb_return+0x74/0x490 drivers/net/usb/usbnet.c:331 usbnet_resume_rx+0x4b/0x170 drivers/net/usb/usbnet.c:708 usbnet_change_mtu+0x1be/0x220 drivers/net/usb/usbnet.c:417 __dev_set_mtu net/core/dev.c:9443 [inline] netif_set_mtu_ext+0x369/0x5c0 net/core/dev.c:9496 netif_set_mtu+0xb0/0x160 net/core/dev.c:9520 dev_set_mtu+0xae/0x170 net/core/dev_api.c:247 dev_ifsioc+0xa31/0x18d0 net/core/dev_ioctl.c:572 dev_ioctl+0x223/0x10e0 net/core/dev_ioctl.c:821 sock_do_ioctl+0x19d/0x280 net/socket.c:1204 sock_ioctl+0x42f/0x6a0 net/socket.c:1311 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:906 [inline] __se_sys_ioctl fs/ioctl.c:892 [inline] __x64_sys_ioctl+0x190/0x200 fs/ioctl.c:892 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f For historical and portability reasons, the netif_rx() is usually run in the softirq or interrupt context, this commit therefore add local_bh_disable/enable() protection in the usbnet_resume_rx().
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于usbnet在可抢占代码中使用smp_processor_id，可能导致竞争条件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 43daa96b166c3cf5ff30dfac0c5efa2620e4beab ~ 6635e52bc4165793aefd686962d912d73d323afe -
LinuxLinux 4.7 -

II. Public POCs for CVE-2025-40164

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-40164

请登录查看更多情报信息。

Patches & Fixes for CVE-2025-40164 (2)

Other References for CVE-2025-40164 (1)

Same Patch Batch · Linux · 2025-11-12 · 96 CVEs total

CVE-2025-401769.8 CRITICALtls: wait for pending async decryptions if tls_strp_msg_hold fails
CVE-2025-401408.8 HIGHnet: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
CVE-2025-401338.1 HIGHmptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable().
CVE-2025-402048.1 HIGHsctp: Fix MAC comparison to be constant-time
CVE-2025-401688.1 HIGHsmc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
CVE-2025-401588.1 HIGHipv6: use RCU in ip6_output()
CVE-2025-401358.1 HIGHipv6: use RCU in ip6_xmit()
CVE-2025-401868.1 HIGHtcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
CVE-2025-401418.0 HIGHBluetooth: ISO: Fix possible UAF on iso_conn_free
CVE-2025-401677.8 HIGHext4: detect invalid INLINE_DATA + EXTENTS flag combination
CVE-2025-401597.8 HIGHxsk: Harden userspace-supplied xdp_desc validation
CVE-2025-401667.8 HIGHdrm/xe/guc: Check GuC running state before deregistering exec queue
CVE-2025-401657.8 HIGHmedia: nxp: imx8-isi: m2m: Fix streaming cleanup on release
CVE-2025-401517.8 HIGHLoongArch: BPF: No support of struct argument in trampoline programs
CVE-2025-401497.8 HIGHtls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
CVE-2025-401727.8 HIGHaccel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
CVE-2025-401697.8 HIGHbpf: Reject negative offsets for ALU ops
CVE-2025-402017.8 HIGHkernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
CVE-2025-402037.8 HIGHlistmount: don't call path_put() under namespace semaphore
CVE-2025-402057.8 HIGHbtrfs: avoid potential out-of-bounds in btrfs_encode_fh()

Showing top 20 of 96 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2025-40164

No comments yet

Leave a comment