CVE-2025-40108: serial: qcom-geni: Fix blocked task
In the Linux kernel, the following vulnerability has been resolved:
serial: qcom-geni: Fix blocked task
Revert commit 1afa70632c39 ("serial: qcom-geni: Enable PM runtime for serial driver") and its dependent commit 86fa39dd6fb7 ("serial: qcom-geni: Enable Serial on SA8255p Qualcomm platforms") because the first one causes regression - hang task on Qualcomm RB1 board (QRB2210) and unable to use serial at all during normal boot:
INFO: task kworker/u16:0:12 blocked for more than 42 seconds. Not tainted 6.17.0-rc1-00004-g53e760d89498 #9 "echo 0 > /proc/sys/kernel/hungtasktimeoutsecs" disables this message. task:kworker/u16:0 state:D stack:0 pid:12 tgid:12 ppid:2 taskflags:0x4208060 flags:0x00000010 Workqueue: async asyncrunentryfn Call trace: switchto+0xe8/0x1a0 (T) schedule+0x290/0x7c0 schedule+0x34/0x118 rpmresume+0x14c/0x66c rpmresume+0x2a4/0x66c rpmresume+0x2a4/0x66c rpmresume+0x2a4/0x66c pmruntimeresume+0x50/0x9c driverprobedevice+0x58/0x120 driverprobedevice+0x3c/0x154 driverattachasynchelper+0x4c/0xc0 asyncrunentryfn+0x34/0xe0 processonework+0x148/0x290 workerthread+0x2c4/0x3e0 kthread+0x118/0x1c0 retfromfork+0x10/0x20
The issue was reported on 12th of August and was ignored by author of commits introducing issue for two weeks. Only after complaining author produced a fix which did not work, so if original commits cannot be reliably fixed for 5 weeks, they obviously are buggy and need to be dropped.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40108?
CVE-2025-40108 has a medium severity level as it addresses tasks being blocked in the Linux kernel.
How do I fix CVE-2025-40108?
To fix CVE-2025-40108, ensure your Linux kernel is updated to the version that includes the reverted commits.
What are the potential impacts of CVE-2025-40108?
CVE-2025-40108 could lead to performance issues due to blocked tasks in the kernel.
Which versions of the Linux kernel are affected by CVE-2025-40108?
CVE-2025-40108 affects versions of the Linux kernel that implemented the qcom-geni serial driver with the relevant commits.
Is CVE-2025-40108 specific to any hardware?
CVE-2025-40108 is related to the Qualcomm SA8255p platform due to its specific implementation of the serial driver.