RTNL Dance Removal Vulnerability in Linux Kernel - CVE-2025-22111
Summary
CVE-2025-22111: In the Linux kernel, the following vulnerability has been resolved: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. Affects linux versions 6.1.106-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system resources. It supports a wide range of functionalities, including networking, file systems, and process management. This vulnerability arises from the handling of bridge device operations, specifically during the addition and deletion of interfaces, which can lead to race conditions under certain circumstances.
Vulnerability Detail
In the Linux kernel, a vulnerability identified as CVE-2025-22111 has been discovered related to the handling of SIOCBRADDIF and SIOCBRDELIF commands. The issue stems from the unnecessary RTNL (Routing Netlink) dance that occurs when these commands are processed through dev_ioctl(). This can lead to a race condition where one thread attempts to detach a device from a bridge while another thread tries to remove the bridge itself. This race condition can result in a deadlock situation, causing system instability and potential denial of service.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid using the SIOCBRADDIF and SIOCBRDELIF commands until the kernel is updated. This can help mitigate the risk of encountering the race condition while waiting for the patch.
Conclusion
CVE-2025-22111 is a significant vulnerability in the Linux kernel that can lead to race conditions and system instability. Users are advised to update their systems to the latest kernel version to mitigate the risks associated with this vulnerability. Temporary workarounds are available, but a permanent fix is through the kernel update.
See every vulnerability recorded for linux →
FAQ
CVE-2025-22111 is a vulnerability in the Linux kernel that can lead to race conditions during the addition and deletion of bridge interfaces, potentially causing system instability.
If exploited, this vulnerability can lead to deadlocks and denial of service, impacting the stability and performance of your system.
The vulnerability affects Linux kernel versions used in Debian 12 and Debian 13.
You can use tools like Vulert, which monitors open-source vulnerabilities in real-time. By uploading your manifest file, you can check if your application is affected by this vulnerability.
Yes, updating to the patched version of the Linux kernel will permanently fix the vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
