{
  "cveId": "CVE-2025-39769",
  "url": "https://patchblox.com/security/cve/CVE-2025-39769",
  "summary": "CVE-2025-39769 is fixed in linux on 1 platform by DEBIAN-CVE-2025-39769 (version 6.16.5-1), released September 11, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bnxt_en: Fix lockdep warning during rmmod  The c...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  bnxt_en: Fix lockdep warning during rmmod  The commit under the Fixes tag added a netdev_assert_locked() in bnxt_free_ntp_fltrs().  The lock should be held during normal run-time but the assert will be triggered (see below) during bnxt_remove_one() which should not need the lock.  The netdev is already unregistered by then.  Fix it by calling netdev_assert_locked_or_invisible() which will not assert if the netdev is unregistered.  WARNING: CPU: 5 PID: 2241 at ./include/net/netdev_lock.h:17 bnxt_free_ntp_fltrs\u002B0xf8/0x100 [bnxt_en] Modules linked in: rpcrdma rdma_cm iw_cm ib_cm configfs ib_core bnxt_en(-) bridge stp llc x86_pkg_temp_thermal xfs tg3 [last unloaded: bnxt_re] CPU: 5 UID: 0 PID: 2241 Comm: rmmod Tainted: G S      W           6.16.0 #2 PREEMPT(voluntary) Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN Hardware name: Dell Inc. PowerEdge R730/072T6D, BIOS 2.4.3 01/17/2017 RIP: 0010:bnxt_free_ntp_fltrs\u002B0xf8/0x100 [bnxt_en] Code: 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 8b 47 60 be ff ff ff ff 48 8d b8 28 0c 00 00 e8 d0 cf 41 c3 85 c0 0f 85 2e ff ff ff \u003C0f\u003E 0b e9 27 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffa92082387da0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff9e5b593d8000 RCX: 0000000000000001 RDX: 0000000000000001 RSI: ffffffff83dc9a70 RDI: ffffffff83e1a1cf RBP: ffff9e5b593d8c80 R08: 0000000000000000 R09: ffffffff8373a2b3 R10: 000000008100009f R11: 0000000000000001 R12: 0000000000000001 R13: ffffffffc01c4478 R14: dead000000000122 R15: dead000000000100 FS:  00007f3a8a52c740(0000) GS:ffff9e631ad1c000(0000) knlGS:0000000000000000 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055bb289419c8 CR3: 000000011274e001 CR4: 00000000003706f0 Call Trace:  \u003CTASK\u003E  bnxt_remove_one\u002B0x57/0x180 [bnxt_en]  pci_device_remove\u002B0x39/0xc0  device_release_driver_internal\u002B0xa5/0x130  driver_detach\u002B0x42/0x90  bus_remove_driver\u002B0x61/0xc0  pci_unregister_driver\u002B0x38/0x90  bnxt_exit\u002B0xc/0x7d0 [bnxt_en]",
  "published": "2025-09-11T17:15:42Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00102,
  "epssPercentile": 0.00941,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.16.5-1",
      "fix": "DEBIAN-CVE-2025-39769",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-39769",
      "released": "2025-09-11T17:15:42Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}