CVE-2025-71158 — Linux vulnerability
6 documents6 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 99.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 23
Description
In the Linux kernel, the following vulnerability has been resolved:
gpio: mpsse: ensure worker is torn down
When an IRQ worker is running, unplugging the device would cause a
crash. The sealevel hardware this driver was written for was not
hotpluggable, so I never realized it.
This change uses a spinlock to protect a list of workers, which
it tears down on disconnect.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages4 packages
▶CVEListV5linux/linuxc46a74ff05c0ac76ba11ef21c930c3b447abf31a — 472d900c8bcac301ae0e40fdca7db799bd989ff5+2
Patches
🔴Vulnerability Details
2GHSA▶
GHSA-xx2g-p975-mwgc: In the Linux kernel, the following vulnerability has been resolved:
gpio: mpsse: ensure worker is torn down
When an IRQ worker is running, unpluggin↗2026-01-23
OSV▶
CVE-2025-71158: In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: ensure worker is torn down When an IRQ worker is running, unplugging↗2026-01-23