CVE-2025-22010

Summary

CVE-2025-22010 is a vulnerability affecting the Linux kernel that can result in a soft lockup during the allocation of large RDMA/hns buffers. The issue arises when the driver, specifically hns_roce_hw_v2, runs a for-loop while allocating and mapping bt pages, which can lead to a significant loop count and subsequent soft lockups. This can result in CPU freezes and system instability. To mitigate this issue, a cond_resched() call has been added to the affected loops, with a threshold of 100GB MR as the trigger point to avoid impacting normal buffer allocation performance.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.