CVE - CVE-2025-23151

CVE-ID
CVE-2025-23151	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix race between unprepare and queue_buf A client driver may use mhi_unprepare_from_transfer() to quiesce incoming data during the client driver's tear down. The client driver might also be processing data at the same time, resulting in a call to mhi_queue_buf() which will invoke mhi_gen_tre(). If mhi_gen_tre() runs after mhi_unprepare_from_transfer() has torn down the channel, a panic will occur due to an invalid dereference leading to a page fault. This occurs because mhi_gen_tre() does not verify the channel state after locking it. Fix this by having mhi_gen_tre() confirm the channel state is valid, or return error to avoid accessing deinitialized data. [mani: added stable tag]
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0686a818d77a431fc3ba2fab4b46bbb04e8c9380 URL:https://git.kernel.org/stable/c/0686a818d77a431fc3ba2fab4b46bbb04e8c9380 MISC:https://git.kernel.org/stable/c/178e5657c8fd285125cc6743a81b513bce099760 URL:https://git.kernel.org/stable/c/178e5657c8fd285125cc6743a81b513bce099760 MISC:https://git.kernel.org/stable/c/3e7ecf181cbdde9753204ada3883ca1704d8702b URL:https://git.kernel.org/stable/c/3e7ecf181cbdde9753204ada3883ca1704d8702b MISC:https://git.kernel.org/stable/c/5f084993c90d9d0b4a52a349ede5120f992a7ca1 URL:https://git.kernel.org/stable/c/5f084993c90d9d0b4a52a349ede5120f992a7ca1 MISC:https://git.kernel.org/stable/c/899d0353ea69681f474b6bc9de32c663b89672da URL:https://git.kernel.org/stable/c/899d0353ea69681f474b6bc9de32c663b89672da MISC:https://git.kernel.org/stable/c/a77955f7704b2a00385e232cbcc1cb06b5c7a425 URL:https://git.kernel.org/stable/c/a77955f7704b2a00385e232cbcc1cb06b5c7a425 MISC:https://git.kernel.org/stable/c/ee1fce83ed56450087309b9b74ad9bcb2b010fa6 URL:https://git.kernel.org/stable/c/ee1fce83ed56450087309b9b74ad9bcb2b010fa6
Assigning CNA
kernel.org
Date Record Created
20250111	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250111)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)