CVE-2025-38576
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-08-19

Last updated on: 2025-11-03

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: Make EEH driver device hotplug safe Multiple race conditions existed between the PCIe hotplug driver and the EEH driver, leading to a variety of kernel oopses of the same general nature: <pcie device unplug> <eeh driver trigger> <hotplug removal trigger> <pcie tree reconfiguration> <eeh recovery next step> <oops in EEH driver bus iteration loop> A second class of oops is also seen when the underlying bus disappears during device recovery. Refactor the EEH module to be PCI rescan and remove safe. Also clean up a few minor formatting / readability issues.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-08-19
Last Modified
2025-11-03
Generated
2026-05-27
AI Q&A
2025-08-19
EPSS Evaluated
2026-05-25
NVD
CVE-2025-38576
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel 6.1.153
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability involves multiple race conditions between the PCIe hotplug driver and the EEH driver in the Linux kernel. These race conditions can cause kernel oopses (crashes) during events such as PCIe device unplugging, EEH driver triggers, hotplug removal triggers, PCIe tree reconfiguration, and EEH recovery steps. Additionally, kernel oopses can occur if the underlying bus disappears during device recovery. The vulnerability was addressed by refactoring the EEH module to be safe for PCI rescan and removal, and by improving code formatting and readability.


How can this vulnerability impact me? :

This vulnerability can lead to kernel crashes (oopses) during PCIe device hotplug operations, which may cause system instability or downtime. Such instability can affect system reliability and availability, potentially disrupting services or operations that depend on the affected Linux kernel.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart