CVE-2025-39733 team: replace team lock with rtnl lock
A race condition in the Linux kernel team driver can lead to system instability or crashes due to improper lock ordering.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-39733?
CVE-2025-39733 is a medium-severity vulnerability in Linux kernel, published on 7 Sep 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
team: replace team lock with rtnl lock
syszbot reports various ordering issues for lower instance locks and team lock. Switch to using rtnl lock for protecting team device, similar to bonding. Based on the patch by Tetsuo Handa.
Which versions are affected by CVE-2025-39733?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2025-39733?
Apply the vendor's patch.
Is CVE-2025-39733 being exploited?
There is no known exploitation of CVE-2025-39733 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2025-39733, GHSA-r9mx-4c25-vp64, UBUNTU-CVE-2025-39733.