CVE-2025-71158: gpio: mpsse: ensure worker is torn down
In the Linux kernel, the following vulnerability has been resolved:
gpio: mpsse: ensure worker is torn down
When an IRQ worker is running, unplugging the device would cause a crash. The sealevel hardware this driver was written for was not hotpluggable, so I never realized it.
This change uses a spinlock to protect a list of workers, which it tears down on disconnect.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71158?
The severity of CVE-2025-71158 is classified as high due to potential system crashes when unplugging the device during IRQ worker execution.
How do I fix CVE-2025-71158?
To fix CVE-2025-71158, ensure that you update your Linux kernel to a version where this vulnerability has been mitigated.
What systems are affected by CVE-2025-71158?
CVE-2025-71158 affects the Linux kernel and related systems that utilize the gpio:mpsse driver.
What are the potential impacts of CVE-2025-71158?
The potential impacts of CVE-2025-71158 include system crashes and instability when devices are unplugged during operation.
Is CVE-2025-71158 a hardware-specific vulnerability?
Yes, CVE-2025-71158 is specifically related to the sealevel hardware which was not designed to be hotpluggable.