CVE-2025-38040 (GCVE-0-2025-38040)

Vulnerability from cvelistv5 – Published: 2025-06-18 09:33 – Updated: 2026-05-11 21:20
VLAI
Title
serial: mctrl_gpio: split disable_ms into sync and no_sync APIs
Summary
In the Linux kernel, the following vulnerability has been resolved: serial: mctrl_gpio: split disable_ms into sync and no_sync APIs The following splat has been observed on a SAMA5D27 platform using atmel_serial: BUG: sleeping function called from invalid context at kernel/irq/manage.c:738 in_atomic(): 1, irqs_disabled(): 128, non_block: 0, pid: 27, name: kworker/u5:0 preempt_count: 1, expected: 0 INFO: lockdep is turned off. irq event stamp: 0 hardirqs last enabled at (0): [<00000000>] 0x0 hardirqs last disabled at (0): [<c01588f0>] copy_process+0x1c4c/0x7bec softirqs last enabled at (0): [<c0158944>] copy_process+0x1ca0/0x7bec softirqs last disabled at (0): [<00000000>] 0x0 CPU: 0 UID: 0 PID: 27 Comm: kworker/u5:0 Not tainted 6.13.0-rc7+ #74 Hardware name: Atmel SAMA5 Workqueue: hci0 hci_power_on [bluetooth] Call trace: unwind_backtrace from show_stack+0x18/0x1c show_stack from dump_stack_lvl+0x44/0x70 dump_stack_lvl from __might_resched+0x38c/0x598 __might_resched from disable_irq+0x1c/0x48 disable_irq from mctrl_gpio_disable_ms+0x74/0xc0 mctrl_gpio_disable_ms from atmel_disable_ms.part.0+0x80/0x1f4 atmel_disable_ms.part.0 from atmel_set_termios+0x764/0x11e8 atmel_set_termios from uart_change_line_settings+0x15c/0x994 uart_change_line_settings from uart_set_termios+0x2b0/0x668 uart_set_termios from tty_set_termios+0x600/0x8ec tty_set_termios from ttyport_set_flow_control+0x188/0x1e0 ttyport_set_flow_control from wilc_setup+0xd0/0x524 [hci_wilc] wilc_setup [hci_wilc] from hci_dev_open_sync+0x330/0x203c [bluetooth] hci_dev_open_sync [bluetooth] from hci_dev_do_open+0x40/0xb0 [bluetooth] hci_dev_do_open [bluetooth] from hci_power_on+0x12c/0x664 [bluetooth] hci_power_on [bluetooth] from process_one_work+0x998/0x1a38 process_one_work from worker_thread+0x6e0/0xfb4 worker_thread from kthread+0x3d4/0x484 kthread from ret_from_fork+0x14/0x28 This warning is emitted when trying to toggle, at the highest level, some flow control (with serdev_device_set_flow_control) in a device driver. At the lowest level, the atmel_serial driver is using serial_mctrl_gpio lib to enable/disable the corresponding IRQs accordingly. The warning emitted by CONFIG_DEBUG_ATOMIC_SLEEP is due to disable_irq (called in mctrl_gpio_disable_ms) being possibly called in some atomic context (some tty drivers perform modem lines configuration in regions protected by port lock). Split mctrl_gpio_disable_ms into two differents APIs, a non-blocking one and a blocking one. Replace mctrl_gpio_disable_ms calls with the relevant version depending on whether the call is protected by some port lock.
Severity
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: ce59e48fdbad2aa6609ceb87e1306ec69e577e05 , < 68435c1fa3db696db4f480385db9e50e26691d0d (git)
Affected: ce59e48fdbad2aa6609ceb87e1306ec69e577e05 , < c504c11b94d6e4ad818ca5578dffa8ff29ad0f20 (git)
Affected: ce59e48fdbad2aa6609ceb87e1306ec69e577e05 , < e6a46719a2369eb5186d4f7e6c0478720ca1ec3d (git)
Affected: ce59e48fdbad2aa6609ceb87e1306ec69e577e05 , < 7187ec6b0b9ff22ebac2c3bb4178b7dbbdc0a55a (git)
Affected: ce59e48fdbad2aa6609ceb87e1306ec69e577e05 , < 1bd2aad57da95f7f2d2bb52f7ad15c0f4993a685 (git)
Create a notification for this product.
Linux Linux Affected: 4.4
Unaffected: 0 , < 4.4 (semver)
Unaffected: 6.1.141 , ≤ 6.1.* (semver)
Unaffected: 6.6.93 , ≤ 6.6.* (semver)
Unaffected: 6.12.31 , ≤ 6.12.* (semver)
Unaffected: 6.14.9 , ≤ 6.14.* (semver)
Unaffected: 6.15 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T17:33:17.475Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "Documentation/driver-api/serial/driver.rst",
            "drivers/tty/serial/8250/8250_port.c",
            "drivers/tty/serial/atmel_serial.c",
            "drivers/tty/serial/imx.c",
            "drivers/tty/serial/serial_mctrl_gpio.c",
            "drivers/tty/serial/serial_mctrl_gpio.h",
            "drivers/tty/serial/sh-sci.c",
            "drivers/tty/serial/stm32-usart.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "68435c1fa3db696db4f480385db9e50e26691d0d",
              "status": "affected",
              "version": "ce59e48fdbad2aa6609ceb87e1306ec69e577e05",
              "versionType": "git"
            },
            {
              "lessThan": "c504c11b94d6e4ad818ca5578dffa8ff29ad0f20",
              "status": "affected",
              "version": "ce59e48fdbad2aa6609ceb87e1306ec69e577e05",
              "versionType": "git"
            },
            {
              "lessThan": "e6a46719a2369eb5186d4f7e6c0478720ca1ec3d",
              "status": "affected",
              "version": "ce59e48fdbad2aa6609ceb87e1306ec69e577e05",
              "versionType": "git"
            },
            {
              "lessThan": "7187ec6b0b9ff22ebac2c3bb4178b7dbbdc0a55a",
              "status": "affected",
              "version": "ce59e48fdbad2aa6609ceb87e1306ec69e577e05",
              "versionType": "git"
            },
            {
              "lessThan": "1bd2aad57da95f7f2d2bb52f7ad15c0f4993a685",
              "status": "affected",
              "version": "ce59e48fdbad2aa6609ceb87e1306ec69e577e05",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "Documentation/driver-api/serial/driver.rst",
            "drivers/tty/serial/8250/8250_port.c",
            "drivers/tty/serial/atmel_serial.c",
            "drivers/tty/serial/imx.c",
            "drivers/tty/serial/serial_mctrl_gpio.c",
            "drivers/tty/serial/serial_mctrl_gpio.h",
            "drivers/tty/serial/sh-sci.c",
            "drivers/tty/serial/stm32-usart.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.4"
            },
            {
              "lessThan": "4.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.141",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.93",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.31",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.14.*",
              "status": "unaffected",
              "version": "6.14.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.15",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.141",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.93",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.31",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.14.9",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.15",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: mctrl_gpio: split disable_ms into sync and no_sync APIs\n\nThe following splat has been observed on a SAMA5D27 platform using\natmel_serial:\n\nBUG: sleeping function called from invalid context at kernel/irq/manage.c:738\nin_atomic(): 1, irqs_disabled(): 128, non_block: 0, pid: 27, name: kworker/u5:0\npreempt_count: 1, expected: 0\nINFO: lockdep is turned off.\nirq event stamp: 0\nhardirqs last  enabled at (0): [\u003c00000000\u003e] 0x0\nhardirqs last disabled at (0): [\u003cc01588f0\u003e] copy_process+0x1c4c/0x7bec\nsoftirqs last  enabled at (0): [\u003cc0158944\u003e] copy_process+0x1ca0/0x7bec\nsoftirqs last disabled at (0): [\u003c00000000\u003e] 0x0\nCPU: 0 UID: 0 PID: 27 Comm: kworker/u5:0 Not tainted 6.13.0-rc7+ #74\nHardware name: Atmel SAMA5\nWorkqueue: hci0 hci_power_on [bluetooth]\nCall trace:\n  unwind_backtrace from show_stack+0x18/0x1c\n  show_stack from dump_stack_lvl+0x44/0x70\n  dump_stack_lvl from __might_resched+0x38c/0x598\n  __might_resched from disable_irq+0x1c/0x48\n  disable_irq from mctrl_gpio_disable_ms+0x74/0xc0\n  mctrl_gpio_disable_ms from atmel_disable_ms.part.0+0x80/0x1f4\n  atmel_disable_ms.part.0 from atmel_set_termios+0x764/0x11e8\n  atmel_set_termios from uart_change_line_settings+0x15c/0x994\n  uart_change_line_settings from uart_set_termios+0x2b0/0x668\n  uart_set_termios from tty_set_termios+0x600/0x8ec\n  tty_set_termios from ttyport_set_flow_control+0x188/0x1e0\n  ttyport_set_flow_control from wilc_setup+0xd0/0x524 [hci_wilc]\n  wilc_setup [hci_wilc] from hci_dev_open_sync+0x330/0x203c [bluetooth]\n  hci_dev_open_sync [bluetooth] from hci_dev_do_open+0x40/0xb0 [bluetooth]\n  hci_dev_do_open [bluetooth] from hci_power_on+0x12c/0x664 [bluetooth]\n  hci_power_on [bluetooth] from process_one_work+0x998/0x1a38\n  process_one_work from worker_thread+0x6e0/0xfb4\n  worker_thread from kthread+0x3d4/0x484\n  kthread from ret_from_fork+0x14/0x28\n\nThis warning is emitted when trying to toggle, at the highest level,\nsome flow control (with serdev_device_set_flow_control) in a device\ndriver. At the lowest level, the atmel_serial driver is using\nserial_mctrl_gpio lib to enable/disable the corresponding IRQs\naccordingly.  The warning emitted by CONFIG_DEBUG_ATOMIC_SLEEP is due to\ndisable_irq (called in mctrl_gpio_disable_ms) being possibly called in\nsome atomic context (some tty drivers perform modem lines configuration\nin regions protected by port lock).\n\nSplit mctrl_gpio_disable_ms into two differents APIs, a non-blocking one\nand a blocking one. Replace mctrl_gpio_disable_ms calls with the\nrelevant version depending on whether the call is protected by some port\nlock."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T21:20:07.627Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/68435c1fa3db696db4f480385db9e50e26691d0d"
        },
        {
          "url": "https://git.kernel.org/stable/c/c504c11b94d6e4ad818ca5578dffa8ff29ad0f20"
        },
        {
          "url": "https://git.kernel.org/stable/c/e6a46719a2369eb5186d4f7e6c0478720ca1ec3d"
        },
        {
          "url": "https://git.kernel.org/stable/c/7187ec6b0b9ff22ebac2c3bb4178b7dbbdc0a55a"
        },
        {
          "url": "https://git.kernel.org/stable/c/1bd2aad57da95f7f2d2bb52f7ad15c0f4993a685"
        }
      ],
      "title": "serial: mctrl_gpio: split disable_ms into sync and no_sync APIs",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-38040",
    "datePublished": "2025-06-18T09:33:25.720Z",
    "dateReserved": "2025-04-16T04:51:23.978Z",
    "dateUpdated": "2026-05-11T21:20:07.627Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-38040",
      "date": "2026-05-25",
      "epss": "0.00079",
      "percentile": "0.23176"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-38040\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-06-18T10:15:36.400\",\"lastModified\":\"2025-12-18T21:32:44.097\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nserial: mctrl_gpio: split disable_ms into sync and no_sync APIs\\n\\nThe following splat has been observed on a SAMA5D27 platform using\\natmel_serial:\\n\\nBUG: sleeping function called from invalid context at kernel/irq/manage.c:738\\nin_atomic(): 1, irqs_disabled(): 128, non_block: 0, pid: 27, name: kworker/u5:0\\npreempt_count: 1, expected: 0\\nINFO: lockdep is turned off.\\nirq event stamp: 0\\nhardirqs last  enabled at (0): [\u003c00000000\u003e] 0x0\\nhardirqs last disabled at (0): [\u003cc01588f0\u003e] copy_process+0x1c4c/0x7bec\\nsoftirqs last  enabled at (0): [\u003cc0158944\u003e] copy_process+0x1ca0/0x7bec\\nsoftirqs last disabled at (0): [\u003c00000000\u003e] 0x0\\nCPU: 0 UID: 0 PID: 27 Comm: kworker/u5:0 Not tainted 6.13.0-rc7+ #74\\nHardware name: Atmel SAMA5\\nWorkqueue: hci0 hci_power_on [bluetooth]\\nCall trace:\\n  unwind_backtrace from show_stack+0x18/0x1c\\n  show_stack from dump_stack_lvl+0x44/0x70\\n  dump_stack_lvl from __might_resched+0x38c/0x598\\n  __might_resched from disable_irq+0x1c/0x48\\n  disable_irq from mctrl_gpio_disable_ms+0x74/0xc0\\n  mctrl_gpio_disable_ms from atmel_disable_ms.part.0+0x80/0x1f4\\n  atmel_disable_ms.part.0 from atmel_set_termios+0x764/0x11e8\\n  atmel_set_termios from uart_change_line_settings+0x15c/0x994\\n  uart_change_line_settings from uart_set_termios+0x2b0/0x668\\n  uart_set_termios from tty_set_termios+0x600/0x8ec\\n  tty_set_termios from ttyport_set_flow_control+0x188/0x1e0\\n  ttyport_set_flow_control from wilc_setup+0xd0/0x524 [hci_wilc]\\n  wilc_setup [hci_wilc] from hci_dev_open_sync+0x330/0x203c [bluetooth]\\n  hci_dev_open_sync [bluetooth] from hci_dev_do_open+0x40/0xb0 [bluetooth]\\n  hci_dev_do_open [bluetooth] from hci_power_on+0x12c/0x664 [bluetooth]\\n  hci_power_on [bluetooth] from process_one_work+0x998/0x1a38\\n  process_one_work from worker_thread+0x6e0/0xfb4\\n  worker_thread from kthread+0x3d4/0x484\\n  kthread from ret_from_fork+0x14/0x28\\n\\nThis warning is emitted when trying to toggle, at the highest level,\\nsome flow control (with serdev_device_set_flow_control) in a device\\ndriver. At the lowest level, the atmel_serial driver is using\\nserial_mctrl_gpio lib to enable/disable the corresponding IRQs\\naccordingly.  The warning emitted by CONFIG_DEBUG_ATOMIC_SLEEP is due to\\ndisable_irq (called in mctrl_gpio_disable_ms) being possibly called in\\nsome atomic context (some tty drivers perform modem lines configuration\\nin regions protected by port lock).\\n\\nSplit mctrl_gpio_disable_ms into two differents APIs, a non-blocking one\\nand a blocking one. Replace mctrl_gpio_disable_ms calls with the\\nrelevant version depending on whether the call is protected by some port\\nlock.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: serial: mctrl_gpio: divide disabled_ms en API sync y no_sync Se ha observado el siguiente splat en una plataforma SAMA5D27 usando atmel_serial: BUG: funci\u00f3n inactiva llamada desde un contexto no v\u00e1lido en kernel/irq/manage.c:738 in_atomic(): 1, irqs_disabled(): 128, non_block: 0, pid: 27, name: kworker/u5:0 preempt_count: 1, expected: 0 INFO: lockdep est\u00e1 desactivado. Marca de evento irq: 0 hardirqs habilitados por \u00faltima vez en (0): [\u0026lt;00000000\u0026gt;] 0x0 hardirqs deshabilitados por \u00faltima vez en (0): [] copy_process+0x1c4c/0x7bec softirqs habilitados por \u00faltima vez en (0): [] copy_process+0x1ca0/0x7bec softirqs deshabilitados por \u00faltima vez en (0): [\u0026lt;00000000\u0026gt;] 0x0 CPU: 0 UID: 0 PID: 27 Comm: kworker/u5:0 No contaminado 6.13.0-rc7+ #74 Nombre del hardware: Atmel SAMA5 Cola de trabajo: hci0 hci_power_on [bluetooth] Rastreo de llamadas: unwind_backtrace from show_stack+0x18/0x1c show_stack from dump_stack_lvl+0x44/0x70 dump_stack_lvl from __might_resched+0x38c/0x598 __might_resched from disable_irq+0x1c/0x48 disable_irq from mctrl_gpio_disable_ms+0x74/0xc0 mctrl_gpio_disable_ms from atmel_disable_ms.part.0+0x80/0x1f4 atmel_disable_ms.part.0 from atmel_set_termios+0x764/0x11e8 atmel_set_termios from uart_change_line_settings+0x15c/0x994 uart_change_line_settings from uart_set_termios+0x2b0/0x668 uart_set_termios from tty_set_termios+0x600/0x8ec tty_set_termios from ttyport_set_flow_control+0x188/0x1e0 ttyport_set_flow_control from wilc_setup+0xd0/0x524 [hci_wilc] wilc_setup [hci_wilc] from hci_dev_open_sync+0x330/0x203c [bluetooth] hci_dev_open_sync [bluetooth] from hci_dev_do_open+0x40/0xb0 [bluetooth] hci_dev_do_open [bluetooth] from hci_power_on+0x12c/0x664 [bluetooth] hci_power_on [bluetooth] from process_one_work+0x998/0x1a38 process_one_work from worker_thread+0x6e0/0xfb4 worker_thread from kthread+0x3d4/0x484 kthread from ret_from_fork+0x14/0x28 Esta advertencia se emite al intentar alternar, en el nivel m\u00e1s alto, alg\u00fan control de flujo (con serdev_device_set_flow_control) en un controlador de dispositivo. En el nivel m\u00e1s bajo, el controlador atmel_serial est\u00e1 usando la librer\u00eda serial_mctrl_gpio para habilitar/deshabilitar las IRQ correspondientes seg\u00fan corresponda. La advertencia emitida por CONFIG_DEBUG_ATOMIC_SLEEP se debe a que la funci\u00f3n disabled_irq (llamada en mctrl_gpio_disable_ms) posiblemente se llama en alg\u00fan contexto at\u00f3mico (algunos controladores tty realizan la configuraci\u00f3n de l\u00edneas de m\u00f3dem en regiones protegidas por bloqueo de puerto). Divida mctrl_gpio_disable_ms en dos API diferentes, una sin bloqueo y otra con bloqueo. Reemplace las llamadas a mctrl_gpio_disable_ms con la versi\u00f3n relevante dependiendo de si la llamada est\u00e1 protegida por alg\u00fan bloqueo de puerto.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"6.1.141\",\"matchCriteriaId\":\"499998F9-9F80-4E5B-895F-CF94A48EC1EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.93\",\"matchCriteriaId\":\"50A4A9DE-24AB-4FB4-AACD-85D8EABB0571\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.31\",\"matchCriteriaId\":\"1AE98841-5774-4B45-A81C-2D188DB7E5C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.14.9\",\"matchCriteriaId\":\"A9B72DD1-715C-4101-A720-1C8D70044C06\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/1bd2aad57da95f7f2d2bb52f7ad15c0f4993a685\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/68435c1fa3db696db4f480385db9e50e26691d0d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7187ec6b0b9ff22ebac2c3bb4178b7dbbdc0a55a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c504c11b94d6e4ad818ca5578dffa8ff29ad0f20\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e6a46719a2369eb5186d4f7e6c0478720ca1ec3d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.