What’s Vulnerable › Vulnerabilities

CVE-2025-39733: team: replace team lock with rtnl lock

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-07 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: team: replace team lock with rtnl lock syszbot reports various ordering issues for lower instance locks and team lock. Switch to using rtnl lock for protecting team device, similar to bonding. Based on the patch by Tetsuo Handa.

Affected products

• Linux kernel: from 6.15.1 before 6.15.10; from 6.16 before 6.16.1; 6.15 — fixed in 6.15.10, 6.16.1

How to fix

Upgrade to a fixed version: Linux kernel 6.15.10, 6.16.1. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/53edc761c9911f597b6d701e846f6e84f15eaa6d
• https://git.kernel.org/stable/c/556a4337ba3e9a70e1e3a428e8465c3ea3c4aa41
• https://git.kernel.org/stable/c/bfb4fb77f9a8ce33ce357224569eae5564eec573

Get alerted when CVE-2025-39733 or the next vulnerability affects your stack