CVE-2025-23151 — Race Condition in Linux
Severity
4.7MEDIUMNVD
OSV8.8OSV3.2
EPSS
0.1%
top 83.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 1
Latest updateMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
bus: mhi: host: Fix race between unprepare and queue_buf
A client driver may use mhi_unprepare_from_transfer() to quiesce
incoming data during the client driver's tear down. The client driver
might also be processing data at the same time, resulting in a call to
mhi_queue_buf() which will invoke mhi_gen_tre(). If mhi_gen_tre() runs
after mhi_unprepare_from_transfer() has torn down the channel, a panic
will occur due to an inva…
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.0 | Impact: 3.6
Affected Packages6 packages
▶CVEListV5linux/linux176ed1727badd2fad2158e2b214dcbc24f4be7a1 — 899d0353ea69681f474b6bc9de32c663b89672da+8
Also affects: Debian Linux 11.0