Threats tagged 'ghsa-pj73-39g5-xmf7'

CVE-2025-23163 is a vulnerability in the Linux kernel's VLAN network device code where flags are propagated incorrectly during device open operations. This can cause a deadlock due to recursive locking of the device instance lock. The issue arises when VLAN devices propagate allmulti/promiscuous flags on open, leading to unsafe locking scenarios and potential system hangs. The vulnerability has been resolved by changing the propagation of these flags to occur on flag changes rather than on device open. The CVSS score is 5.5 (medium severity) with impact on availability due to possible deadlocks.