CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler
In the Linux kernel, the following vulnerability has been resolved:
scsi: core: ufs: Fix a hang in the error handler
ufshcderrhandlingprepare() calls ufshcdrpmgetsync(). The latter function can only succeed if UFSHCDEHINPROGRESS is not set because resuming involves submitting a SCSI command and ufshcdqueuecommand() returns SCSIMLQUEUEHOSTBUSY if UFSHCDEHINPROGRESS is set. Fix this hang by setting UFSHCDEHINPROGRESS after ufshcdrpmgetsync() has been called instead of before.
Backtrace: switchto+0x174/0x338 schedule+0x600/0x9e4 schedule+0x7c/0xe8 scheduletimeout+0xa4/0x1c8 ioscheduletimeout+0x48/0x70 waitforcommonio+0xa8/0x160 //waiting on STARTSTOP waitforcompletioniotimeout+0x10/0x20 blkexecuterq+0xe4/0x1e4 scsiexecutecmd+0x108/0x244 ufshcdsetdevpwrmode+0xe8/0x250 ufshcdwlresume+0x94/0x354 ufshcdwlruntimeresume+0x3c/0x174 scsiruntimeresume+0x64/0xa4 rpmresume+0x15c/0xa1c pmruntimeresume+0x4c/0x90 // Runtime resume ongoing ufshcderrhandler+0x1a0/0xd08 processonework+0x174/0x808 workerthread+0x15c/0x490 kthread+0xf4/0x1ec retfromfork+0x10/0x20
[ bvanassche: rewrote patch description ]
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In the Linux kernel UFS error handler, set UFSHCD_EH_IN_PROGRESS after ufshcd_rpm_get_sync() has been called, rather than before it.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38119?
CVE-2025-38119 has been assigned a severity level that indicates it may lead to hang issues in the error handler of the Linux kernel.
How do I fix CVE-2025-38119?
To fix CVE-2025-38119, upgrade to the latest stable version of the Linux kernel where this vulnerability is addressed.
What are the potential impacts of CVE-2025-38119?
The potential impacts of CVE-2025-38119 include system hangs during error handling in UFS devices, which can affect system stability.
Which versions of the Linux kernel are affected by CVE-2025-38119?
CVE-2025-38119 affects specific versions of the Linux kernel prior to the vulnerability patch being applied.
Is there a workaround for CVE-2025-38119 while waiting for a patch?
Currently, the most effective solution is to apply the recommended upgrade to the kernel as a workaround for CVE-2025-38119.