[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-22111":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":18,"aliases":19,"duplicate_of":9,"upstream":20,"downstream":21,"duplicates":110,"related":111,"reserved_at":9,"published_at":125,"modified_at":126,"state":127,"summary":128,"references_raw":137,"kevs":164,"epss":165,"epss_history":168,"metrics":442,"affected":448},"CVE-2025-22111","In the Linux kernel, the following vulnerability has been resolved:\n\nnet: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.\n\nSIOCBRDELIF is passed to dev_ioctl() first and later forwarded to\nbr_ioctl_call(), which causes unnecessary RTNL dance and the splat\nbelow [0] under RTNL pressure.\n\nLet's say Thread A is trying to detach a device from a bridge and\nThread B is trying to remove the bridge.\n\nIn dev_ioctl(), Thread A bumps the bridge device's refcnt by\nnetdev_hold() and releases RTNL because the following br_ioctl_call()\nalso re-acquires RTNL.\n\nIn the race window, Thread B could acquire RTNL and try to remove\nthe bridge device.  Then, rtnl_unlock() by Thread B will release RTNL\nand wait for netdev_put() by Thread A.\n\nThread A, however, must hold RTNL after the unlock in dev_ifsioc(),\nwhich may take long under RTNL pressure, resulting in the splat by\nThread B.\n\n  Thread A (SIOCBRDELIF)           Thread B (SIOCBRDELBR)\n  ----------------------           ----------------------\n  sock_ioctl                       sock_ioctl\n  `- sock_do_ioctl                 `- br_ioctl_call\n     `- dev_ioctl                     `- br_ioctl_stub\n        |- rtnl_lock                     |\n        |- dev_ifsioc                    '\n        '  |- dev = __dev_get_by_name(...)\n           |- netdev_hold(dev, ...)      .\n       /   |- rtnl_unlock  ------.       |\n       |   |- br_ioctl_call       `--->  |- rtnl_lock\n  Race |   |  `- br_ioctl_stub           |- br_del_bridge\n  Window   |     |                       |  |- dev = __dev_get_by_name(...)\n       |   |     |  May take long        |  `- br_dev_delete(dev, ...)\n       |   |     |  under RTNL pressure  |     `- unregister_netdevice_queue(dev, ...)\n       |   |     |               |       `- rtnl_unlock\n       \\   |     |- rtnl_lock  \u003C-'          `- netdev_run_todo\n           |     |- ...                        `- netdev_run_todo\n           |     `- rtnl_unlock                   |- __rtnl_unlock\n           |                                      |- netdev_wait_allrefs_any\n           |- netdev_put(dev, ...)  \u003C----------------'\n                                                Wait refcnt decrement\n                                                and log splat below\n\nTo avoid blocking SIOCBRDELBR unnecessarily, let's not call\ndev_ioctl() for SIOCBRADDIF and SIOCBRDELIF.\n\nIn the dev_ioctl() path, we do the following:\n\n  1. Copy struct ifreq by get_user_ifreq in sock_do_ioctl()\n  2. Check CAP_NET_ADMIN in dev_ioctl()\n  3. Call dev_load() in dev_ioctl()\n  4. Fetch the master dev from ifr.ifr_name in dev_ifsioc()\n\n3. can be done by request_module() in br_ioctl_call(), so we move\n1., 2., and 4. to br_ioctl_stub().\n\nNote that 2. is also checked later in add_del_if(), but it's better\nperformed before RTNL.\n\nSIOCBRADDIF and SIOCBRDELIF have been processed in dev_ioctl() since\nthe pre-git era, and there seems to be no specific reason to process\nthem there.\n\n[0]:\nunregister_netdevice: waiting for wpan3 to become free. Usage count = 2\nref_tracker: wpan3@ffff8880662d8608 has 1/1 users at\n     __netdev_tracker_alloc include/linux/netdevice.h:4282 [inline]\n     netdev_hold include/linux/netdevice.h:4311 [inline]\n     dev_ifsioc+0xc6a/0x1160 net/core/dev_ioctl.c:624\n     dev_ioctl+0x255/0x10c0 net/core/dev_ioctl.c:826\n     sock_do_ioctl+0x1ca/0x260 net/socket.c:1213\n     sock_ioctl+0x23a/0x6c0 net/socket.c:1318\n     vfs_ioctl fs/ioctl.c:51 [inline]\n     __do_sys_ioctl fs/ioctl.c:906 [inline]\n     __se_sys_ioctl fs/ioctl.c:892 [inline]\n     __x64_sys_ioctl+0x1a4/0x210 fs/ioctl.c:892\n     do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n     do_syscall_64+0xcb/0x250 arch/x86/entry/common.c:83\n     entry_SYSCALL_64_after_hwframe+0x77/0x7f",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"NVD-CWE-NOINFO","Insufficient Information","NVD uses this CWE ID when there is insufficient information to assign a specific CWE.","placeholder","NVD-Reserved",[],[],[],[],[22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108],{"_key":23},"SUSE-SU-2025:02923-1",{"_key":25},"USN-7594-1",{"_key":27},"USN-7594-2",{"_key":29},"USN-7594-3",{"_key":31},"SUSE-SU-2025:02249-1",{"_key":33},"SUSE-SU-2025:02538-1",{"_key":35},"DLA-4476-1",{"_key":37},"DSA-6126-1",{"_key":39},"DSA-6127-1",{"_key":41},"SUSE-SU-2025:02254-1",{"_key":43},"SUSE-SU-2025:02307-1",{"_key":45},"SUSE-SU-2025:02333-1",{"_key":47},"SUSE-SU-2025:20475-1",{"_key":49},"SUSE-SU-2025:20483-1",{"_key":51},"SUSE-SU-2025:20493-1",{"_key":53},"SUSE-SU-2025:20498-1",{"_key":55},"SUSE-SU-2025:02335-1",{"_key":57},"DEBIAN-CVE-2025-22111",{"_key":59},"USN-8096-1",{"_key":61},"USN-8096-2",{"_key":63},"USN-8096-3",{"_key":65},"USN-8096-4",{"_key":67},"USN-8096-5",{"_key":69},"USN-8116-1",{"_key":71},"USN-8141-1",{"_key":73},"USN-8163-1",{"_key":75},"USN-8163-2",{"_key":77},"USN-8243-1",{"_key":79},"RHSA-2025:20095",{"_key":81},"RHSA-2025:20518",{"_key":83},"UBUNTU-CVE-2025-22111",{"_key":85},"USN-8179-1",{"_key":87},"USN-8179-2",{"_key":89},"USN-8179-3",{"_key":91},"USN-8179-4",{"_key":93},"USN-8184-1",{"_key":95},"USN-8185-1",{"_key":97},"USN-8185-2",{"_key":99},"USN-8203-1",{"_key":101},"USN-8204-1",{"_key":103},"USN-8258-1",{"_key":105},"USN-8260-1",{"_key":107},"USN-8261-1",{"_key":109},"USN-8265-1",[],[112,113,114,115,116,117,118,119,120,121,122,123],{"_key":23},{"_key":31},{"_key":33},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":55},{"_key":124},"CGA-MGR6-F54G-RF2Q","2025-04-16T14:12:57.719Z","2026-05-11T21:13:10.941Z","Modified",{"cisa_kev":129,"cisa_ransomware":129,"cisa_vendor":9,"epss_severity":130,"epss_score":131,"severity":132,"severity_score":133,"severity_version":134,"severity_source":135,"severity_vector":136,"severity_status":127},false,"low",0.00024,"medium",5.5,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",[138,143,147,151,155,160],{"url":139,"sources":140,"tags":142},"https://git.kernel.org/stable/c/f51e471cb1577d510c3096e126678e1ea20d2efd",[141,135],"cve.org",[],{"url":144,"sources":145,"tags":146},"https://git.kernel.org/stable/c/338a0f3c66aef4ee13052880d02200aae8f2d8a8",[141,135],[],{"url":148,"sources":149,"tags":150},"https://git.kernel.org/stable/c/d767ce15045df510f55cdd2af5df0eee71f928d0",[141,135],[],{"url":152,"sources":153,"tags":154},"https://git.kernel.org/stable/c/4888e1dcc341e9a132ef7b8516234b3c3296de56",[141,135],[],{"url":156,"sources":157,"tags":158},"https://git.kernel.org/stable/c/00fe0ac64efd1f5373b3dd9f1f84b19235371e39",[141,135],[159],"Patch",{"url":161,"sources":162,"tags":163},"https://git.kernel.org/stable/c/ed3ba9b6e280e14cc3148c1b226ba453f02fa76c",[141,135],[159],[],{"date":166,"score":131,"percentile":167},"2026-06-03",0.07136,[169,173,176,179,182,185,187,190,193,196,199,202,205,208,211,215,218,221,224,227,230,233,236,239,242,245,248,251,254,257,260,263,266,269,272,275,278,281,284,287,290,293,296,299,302,305,308,312,315,318,321,324,327,330,332,335,338,341,345,348,351,354,357,360,363,366,369,372,376,379,383,386,389,391,394,397,400,403,406,409,412,415,418,421,424,427,430,433,436,439],{"date":170,"score":171,"percentile":172},"2025-11-04",0.00023,0.04678,{"date":174,"score":171,"percentile":175},"2025-11-05",0.04689,{"date":177,"score":171,"percentile":178},"2025-11-06",0.04805,{"date":180,"score":171,"percentile":181},"2025-11-07",0.04813,{"date":183,"score":171,"percentile":184},"2025-11-08",0.04811,{"date":186,"score":171,"percentile":181},"2025-11-09",{"date":188,"score":131,"percentile":189},"2025-11-10",0.05414,{"date":191,"score":131,"percentile":192},"2025-11-11",0.05443,{"date":194,"score":131,"percentile":195},"2025-11-12",0.0546,{"date":197,"score":131,"percentile":198},"2025-11-13",0.05482,{"date":200,"score":131,"percentile":201},"2025-11-14",0.05511,{"date":203,"score":131,"percentile":204},"2025-11-15",0.05538,{"date":206,"score":131,"percentile":207},"2025-11-16",0.05546,{"date":209,"score":131,"percentile":210},"2025-11-17",0.05548,{"date":212,"score":213,"percentile":214},"2025-11-18",0.0003,0.04531,{"date":216,"score":213,"percentile":217},"2025-11-19",0.0457,{"date":219,"score":213,"percentile":220},"2025-11-20",0.04625,{"date":222,"score":131,"percentile":223},"2025-11-21",0.05603,{"date":225,"score":131,"percentile":226},"2025-11-22",0.05569,{"date":228,"score":131,"percentile":229},"2025-11-23",0.05545,{"date":231,"score":131,"percentile":232},"2025-11-24",0.05528,{"date":234,"score":131,"percentile":235},"2025-11-25",0.05529,{"date":237,"score":131,"percentile":238},"2025-11-26",0.05562,{"date":240,"score":131,"percentile":241},"2025-11-27",0.05579,{"date":243,"score":131,"percentile":244},"2025-11-28",0.05553,{"date":246,"score":131,"percentile":247},"2025-11-29",0.05596,{"date":249,"score":131,"percentile":250},"2025-11-30",0.05592,{"date":252,"score":131,"percentile":253},"2025-12-01",0.05669,{"date":255,"score":131,"percentile":256},"2025-12-02",0.05685,{"date":258,"score":131,"percentile":259},"2025-12-03",0.05708,{"date":261,"score":131,"percentile":262},"2025-12-04",0.05675,{"date":264,"score":131,"percentile":265},"2025-12-05",0.05732,{"date":267,"score":131,"percentile":268},"2025-12-06",0.05744,{"date":270,"score":131,"percentile":271},"2025-12-07",0.05745,{"date":273,"score":131,"percentile":274},"2025-12-08",0.05746,{"date":276,"score":131,"percentile":277},"2025-12-09",0.05804,{"date":279,"score":131,"percentile":280},"2025-12-10",0.05871,{"date":282,"score":131,"percentile":283},"2025-12-11",0.05867,{"date":285,"score":131,"percentile":286},"2025-12-12",0.0589,{"date":288,"score":131,"percentile":289},"2025-12-13",0.05933,{"date":291,"score":131,"percentile":292},"2025-12-14",0.05899,{"date":294,"score":131,"percentile":295},"2025-12-15",0.05886,{"date":297,"score":131,"percentile":298},"2025-12-16",0.05903,{"date":300,"score":131,"percentile":301},"2025-12-17",0.05982,{"date":303,"score":131,"percentile":304},"2025-12-18",0.06026,{"date":306,"score":131,"percentile":307},"2025-12-19",0.06011,{"date":309,"score":310,"percentile":311},"2025-12-20",0.00025,0.06176,{"date":313,"score":310,"percentile":314},"2025-12-21",0.06162,{"date":316,"score":310,"percentile":317},"2025-12-22",0.06126,{"date":319,"score":310,"percentile":320},"2025-12-23",0.06139,{"date":322,"score":310,"percentile":323},"2025-12-24",0.0617,{"date":325,"score":310,"percentile":326},"2025-12-25",0.0622,{"date":328,"score":310,"percentile":329},"2025-12-26",0.0621,{"date":331,"score":310,"percentile":326},"2025-12-27",{"date":333,"score":310,"percentile":334},"2025-12-28",0.06203,{"date":336,"score":310,"percentile":337},"2025-12-29",0.06189,{"date":339,"score":310,"percentile":340},"2025-12-30",0.06171,{"date":342,"score":343,"percentile":344},"2025-12-31",0.00031,0.08346,{"date":346,"score":343,"percentile":347},"2026-01-01",0.08413,{"date":349,"score":343,"percentile":350},"2026-01-02",0.08416,{"date":352,"score":343,"percentile":353},"2026-01-03",0.08414,{"date":355,"score":343,"percentile":356},"2026-01-04",0.08348,{"date":358,"score":343,"percentile":359},"2026-01-05",0.08297,{"date":361,"score":343,"percentile":362},"2026-01-06",0.08281,{"date":364,"score":343,"percentile":365},"2026-01-07",0.08316,{"date":367,"score":343,"percentile":368},"2026-01-08",0.08388,{"date":370,"score":343,"percentile":371},"2026-01-09",0.08402,{"date":373,"score":374,"percentile":375},"2026-01-10",0.00034,0.09697,{"date":377,"score":374,"percentile":378},"2026-01-11",0.09649,{"date":380,"score":381,"percentile":382},"2026-01-12",0.00046,0.14101,{"date":384,"score":381,"percentile":385},"2026-01-13",0.14081,{"date":387,"score":381,"percentile":388},"2026-01-14",0.14141,{"date":390,"score":381,"percentile":388},"2026-01-15",{"date":392,"score":381,"percentile":393},"2026-01-16",0.14184,{"date":395,"score":381,"percentile":396},"2026-01-17",0.14201,{"date":398,"score":381,"percentile":399},"2026-01-18",0.14138,{"date":401,"score":381,"percentile":402},"2026-01-19",0.14087,{"date":404,"score":381,"percentile":405},"2026-01-20",0.14193,{"date":407,"score":381,"percentile":408},"2026-01-21",0.14185,{"date":410,"score":381,"percentile":411},"2026-01-22",0.14115,{"date":413,"score":381,"percentile":414},"2026-01-23",0.1419,{"date":416,"score":381,"percentile":417},"2026-01-24",0.14232,{"date":419,"score":381,"percentile":420},"2026-01-25",0.14169,{"date":422,"score":381,"percentile":423},"2026-01-26",0.1409,{"date":425,"score":381,"percentile":426},"2026-01-27",0.14086,{"date":428,"score":381,"percentile":429},"2026-01-28",0.14095,{"date":431,"score":381,"percentile":432},"2026-01-29",0.14064,{"date":434,"score":381,"percentile":435},"2026-01-30",0.14077,{"date":437,"score":381,"percentile":438},"2026-01-31",0.1411,{"date":440,"score":381,"percentile":441},"2026-02-01",0.14125,[443],{"source":135,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":444,"cvss_v4_0":9},{"baseScore":133,"baseSeverity":445,"vectorString":136,"impactScore":446,"exploitabilityScore":447},"MEDIUM",6,4.6,[449,478],{"ecosystem":9,"name":450,"vendor":451,"product":451,"cpe_part":452,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":453},"Linux","linux","a",[454,461,464,467,470,473,476],{"version":455,"is_range":456,"range_type":141,"version_start":457,"version_start_type":458,"version_end":459,"version_end_type":460,"fixed_in":9},">= 893b195875340cb44b54c9db99e708145f1210e8, \u003C f51e471cb1577d510c3096e126678e1ea20d2efd",true,"893b195875340cb44b54c9db99e708145f1210e8","including","f51e471cb1577d510c3096e126678e1ea20d2efd","excluding",{"version":462,"is_range":456,"range_type":141,"version_start":457,"version_start_type":458,"version_end":463,"version_end_type":460,"fixed_in":9},">= 893b195875340cb44b54c9db99e708145f1210e8, \u003C 338a0f3c66aef4ee13052880d02200aae8f2d8a8","338a0f3c66aef4ee13052880d02200aae8f2d8a8",{"version":465,"is_range":456,"range_type":141,"version_start":457,"version_start_type":458,"version_end":466,"version_end_type":460,"fixed_in":9},">= 893b195875340cb44b54c9db99e708145f1210e8, \u003C d767ce15045df510f55cdd2af5df0eee71f928d0","d767ce15045df510f55cdd2af5df0eee71f928d0",{"version":468,"is_range":456,"range_type":141,"version_start":457,"version_start_type":458,"version_end":469,"version_end_type":460,"fixed_in":9},">= 893b195875340cb44b54c9db99e708145f1210e8, \u003C 4888e1dcc341e9a132ef7b8516234b3c3296de56","4888e1dcc341e9a132ef7b8516234b3c3296de56",{"version":471,"is_range":456,"range_type":141,"version_start":457,"version_start_type":458,"version_end":472,"version_end_type":460,"fixed_in":9},">= 893b195875340cb44b54c9db99e708145f1210e8, \u003C 00fe0ac64efd1f5373b3dd9f1f84b19235371e39","00fe0ac64efd1f5373b3dd9f1f84b19235371e39",{"version":474,"is_range":456,"range_type":141,"version_start":457,"version_start_type":458,"version_end":475,"version_end_type":460,"fixed_in":9},">= 893b195875340cb44b54c9db99e708145f1210e8, \u003C ed3ba9b6e280e14cc3148c1b226ba453f02fa76c","ed3ba9b6e280e14cc3148c1b226ba453f02fa76c",{"version":477,"is_range":129,"range_type":141,"version_start":477,"version_start_type":458,"version_end":477,"version_end_type":458,"fixed_in":9},"5.15",{"ecosystem":9,"name":479,"vendor":451,"product":480,"cpe_part":481,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":482},"linux kernel","linux_kernel","o",[483],{"version":484,"is_range":456,"range_type":485,"version_start":477,"version_start_type":458,"version_end":486,"version_end_type":460,"fixed_in":9},"gte5.15_lt6.14.2","cpe","6.14.2"]