CVE-2025-21878 — Improper Locking in Linux

CWE-667 — Improper Locking67 documents6 sources
Severity
5.5MEDIUMNVD
OSV8.8OSV7.8OSV4.7
EPSS
0.1%
top 77.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
LinuxLinux KernelDebian Linux+1 more
Timeline
PublishedMar 27
Latest updateOct 15

Description

In the Linux kernel, the following vulnerability has been resolved: i2c: npcm: disable interrupt enable bit before devm_request_irq The customer reports that there is a soft lockup issue related to the i2c driver. After checking, the i2c module was doing a tx transfer and the bmc machine reboots in the middle of the i2c transaction, the i2c module keeps the status without being reset. Due to such an i2c module status, the i2c irq handler keeps getting triggered since the i2c irq handler is re…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages6 packages

▶NVDlinux/linux_kernel5.8 — 5.10.235+6
▶Debianlinux/linux_kernel< 5.10.237-1+3
▶Ubuntulinux/linux_kernel< 5.15.0-140.150+1
▶CVEListV5linux/linux56a1485b102ed1cd5a4af8e87ed794699fd1cad2 — f32d7b4dc6e791523c70e83049645dcba2a2aa33+7
▶debiandebian/linux< linux 6.1.133-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

33
OSV
linux-oracle-6.8 vulnerabilities↗2025-10-15
▶
OSV
linux-azure-nvidia vulnerabilities↗2025-10-08
▶
OSV
linux-oracle vulnerabilities↗2025-10-06
▶
OSV
linux-azure, linux-azure-6.8 vulnerabilities↗2025-10-02
▶
OSV
linux-raspi-realtime vulnerabilities↗2025-10-02
▶

📋Vendor Advisories

33
Ubuntu
Linux kernel (Oracle) vulnerabilities↗2025-10-15
▶
Ubuntu
Linux kernel (Azure, N-Series) vulnerabilities↗2025-10-08
▶
Ubuntu
Linux kernel (Oracle) vulnerabilities↗2025-10-06
▶
Ubuntu
Linux kernel (Raspberry Pi Real-time) vulnerabilities↗2025-10-02
▶
Ubuntu
Linux kernel (HWE) vulnerabilities↗2025-10-02
▶