UBUNTU-CVE-2025-21943: Race Condition

Q: Who is realistically exposed to this issue?

Systems using the gpio-aggregator driver on the listed Ubuntu kernel packages are exposed when they permit local interaction with its sysfs driver attributes and module loading or unloading. The CVSS vector indicates local access and low privileges are required.

Q: What conditions are needed to trigger the failure?

The race requires concurrent use of the gpio-aggregator new_device or delete_device sysfs handlers while the gpio-aggregator module is being unloaded. Exploitation has high attack complexity, but no user interaction is required.

Q: What could happen if the race is triggered?

A module unload can leave a dangling platform device or GPIO forwarder while device creation is in progress. This can produce list corruption and other kernel warnings, and may make the system unstable or unavailable.

Q: What can be done if an update cannot be applied immediately?

Avoid unloading the gpio-aggregator module while processes may write to its new_device or delete_device sysfs attributes. Restrict local access to workflows that create or delete gpio-aggregator devices and prevent concurrent module reload/unload activity.

Q: How can administrators identify a possible occurrence?

Look for kernel warnings beginning with "list_del corruption" during gpio-aggregator device creation or deletion combined with module load/unload activity. Repeated warnings or system instability in that scenario are indicators of the race.

Published Apr 1, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr handlers against module unload Both newdevicestore and deletedevicestore touch module global resources (e.g. gpioaggregatorlock). To prevent race conditions with module unload, a reference needs to be held. Add trymoduleget() in these handlers. For newdevicestore, this eliminates what appears to be the most dangerous scenario: if an id is allocated from gpioaggregatoridr but platformdeviceregister has not yet been called or completed, a concurrent module unload could fail to unregister/delete the device, leaving behind a dangling platform device/GPIO forwarder. This can result in various issues. The following simple reproducer demonstrates these problems: #!/bin/bash while :; do # note: whether 'gpiochip0 0' exists or not does not matter. echo 'gpiochip0 0' > /sys/bus/platform/drivers/gpio-aggregator/newdevice done & while :; do modprobe gpio-aggregator modprobe -r gpio-aggregator done & wait Starting with the following warning, several kinds of warnings will appear and the system may become unstable: ------------[ cut here ]------------ listdel corruption, ffff888103e2e980->next is LISTPOISON1 (dead000000000100) WARNING: CPU: 1 PID: 1327 at lib/listdebug.c:56 listdelentryvalidorreport+0xa3/0x120 [...] RIP: 0010:listdelentryvalidorreport+0xa3/0x120 [...] Call Trace: <TASK> ? listdelentryvalidorreport+0xa3/0x120 ? warn.cold+0x93/0xf2 ? listdelentryvalidorreport+0xa3/0x120 ? reportbug+0xe6/0x170 ? irqworkqueuelocal+0x39/0xe0 ? handlebug+0x58/0x90 ? excinvalidop+0x13/0x60 ? asmexcinvalidop+0x16/0x20 ? listdelentryvalidorreport+0xa3/0x120 gpiodremovelookuptable+0x22/0x60 newdevicestore+0x315/0x350 [gpioaggregator] kernfsfopwriteiter+0x137/0x1f0 vfswrite+0x262/0x430 ksyswrite+0x60/0xd0 dosyscall64+0x6c/0x180 entrySYSCALL64afterhwframe+0x76/0x7e [...] </TASK> ---[ end trace 0000000000000000 ]---

Affected Software

154 affected componentsFixes available

ubuntu/linux-hwe-edge*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-5.15<5.15.0-1084.91~20.04.1

5.15.0-1084.91~20.04.1

ubuntu/linux-azure-5.15<5.15.0-1089.98~20.04.1

5.15.0-1089.98~20.04.1

ubuntu/linux-gcp-5.15<5.15.0-1083.92~20.04.1

5.15.0-1083.92~20.04.1

ubuntu/linux-ibm-5.15<5.15.0-1076.79~20.04.1

5.15.0-1076.79~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1079.85~20.04.1

5.15.0-1079.85~20.04.1

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-140.150~20.04.1

5.15.0-140.150~20.04.1

ubuntu/linux-oracle-5.15<5.15.0-1081.87~20.04.1

5.15.0-1081.87~20.04.1

ubuntu/linux-riscv-5.15<5.15.0-1079.83~20.04.1

5.15.0-1079.83~20.04.1

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.15<5.15.0-142.152~20.04.1

5.15.0-142.152~20.04.1

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1039.39~20.04.1

5.15.0-1039.39~20.04.1

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux<5.15.0-140.150

5.15.0-140.150

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1084.91

5.15.0-1084.91

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-aws-6.8<6.8.0-1030.32~22.04.1

6.8.0-1030.32~22.04.1

ubuntu/linux-azure<5.15.0-1089.98

5.15.0-1089.98

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-6.8<6.8.0-1030.35~22.04.1

6.8.0-1030.35~22.04.1

ubuntu/linux-azure-fde<5.15.0-1089.98.1

5.15.0-1089.98.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1083.92

5.15.0-1083.92

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gcp-6.8<6.8.0-1031.33~22.04.1

6.8.0-1031.33~22.04.1

ubuntu/linux-gke<5.15.0-1081.87

5.15.0-1081.87

ubuntu/linux-gkeop<5.15.0-1066.74

5.15.0-1066.74

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-hwe-6.8<6.8.0-64.67~22.04.1

6.8.0-64.67~22.04.1

ubuntu/linux-ibm<5.15.0-1076.79

5.15.0-1076.79

ubuntu/linux-ibm-6.8<6.8.0-1027.27~22.04.1

6.8.0-1027.27~22.04.1

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-intel-iotg<5.15.0-1079.85

5.15.0-1079.85

ubuntu/linux-kvm<5.15.0-1080.85

5.15.0-1080.85

ubuntu/linux-lowlatency<5.15.0-140.150

5.15.0-140.150

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-lowlatency-hwe-6.8<6.8.0-62.65.1~22.04.1

6.8.0-62.65.1~22.04.1

ubuntu/linux-nvidia<5.15.0-1078.79

5.15.0-1078.79

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-nvidia-6.8<6.8.0-1029.32~22.04.1

6.8.0-1029.32~22.04.1

ubuntu/linux-nvidia-tegra<5.15.0-1037.37

5.15.0-1037.37

ubuntu/linux-nvidia-tegra-igx<5.15.0-1026.26

5.15.0-1026.26

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1081.87

5.15.0-1081.87

ubuntu/linux-oracle-6.5*

ubuntu/linux-oracle-6.8<6.8.0-1027.28~22.04.1

6.8.0-1027.28~22.04.1

ubuntu/linux-raspi<5.15.0-1078.81

5.15.0-1078.81

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-riscv-6.8<6.8.0-62.65~22.04.1

6.8.0-62.65~22.04.1

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1050.54

5.15.0-1050.54

ubuntu/linux-bluefield<5.15.0-1066.68

5.15.0-1066.68

ubuntu/linux-intel-iot-realtime<5.15.0-1077.79

5.15.0-1077.79

ubuntu/linux-realtime<5.15.0-1084.93

5.15.0-1084.93

ubuntu/linux-realtime-6.8<6.8.1-1023.24~22.04.1

6.8.1-1023.24~22.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1084.91+fips1

5.15.0-1084.91+fips1

ubuntu/linux-azure-fips<5.15.0-1089.98+fips1

5.15.0-1089.98+fips1

ubuntu/linux-fips<5.15.0-140.150+fips1

5.15.0-140.150+fips1

ubuntu/linux-gcp-fips<5.15.0-1083.92+fips1

5.15.0-1083.92+fips1

ubuntu/linux<6.8.0-62.65

6.8.0-62.65

ubuntu/linux-aws<6.8.0-1030.32

6.8.0-1030.32

ubuntu/linux-azure<6.8.0-1030.35

6.8.0-1030.35

ubuntu/linux-azure-6.11<6.11.0-1018.18~24.04.1

6.11.0-1018.18~24.04.1

ubuntu/linux-azure-nvidia<6.8.0-1018.19

6.8.0-1018.19

ubuntu/linux-gcp<6.8.0-1031.33

6.8.0-1031.33

ubuntu/linux-gcp-6.11<6.11.0-1016.16~24.04.1

6.11.0-1016.16~24.04.1

ubuntu/linux-gke<6.8.0-1026.30

6.8.0-1026.30

ubuntu/linux-gkeop<6.8.0-1013.15

6.8.0-1013.15

ubuntu/linux-hwe-6.11<6.11.0-28.28~24.04.1

6.11.0-28.28~24.04.1

ubuntu/linux-ibm<6.8.0-1027.27

6.8.0-1027.27

ubuntu/linux-lowlatency<6.8.0-62.65.1

6.8.0-62.65.1

ubuntu/linux-lowlatency-hwe-6.11<6.11.0-1015.16~24.04.2

6.11.0-1015.16~24.04.2

ubuntu/linux-nvidia<6.8.0-1029.32

6.8.0-1029.32

ubuntu/linux-nvidia-6.11<6.11.0-1012.12

6.11.0-1012.12

ubuntu/linux-nvidia-lowlatency<6.8.0-1029.32.1

6.8.0-1029.32.1

ubuntu/linux-nvidia-tegra<6.8.0-1008.8

6.8.0-1008.8

ubuntu/linux-oem-6.11<6.11.0-1024.24

6.11.0-1024.24

ubuntu/linux-oem-6.8<6.8.0-1029.29

6.8.0-1029.29

ubuntu/linux-oracle<6.8.0-1027.28

6.8.0-1027.28

ubuntu/linux-raspi<6.8.0-1029.33

6.8.0-1029.33

ubuntu/linux-raspi-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-xilinx<6.8.0-1017.18

6.8.0-1017.18

ubuntu/linux-raspi-realtime<6.8.0-2024.25

6.8.0-2024.25

ubuntu/linux-realtime<6.8.1-1023.24

6.8.1-1023.24

ubuntu/linux-fips<6.8.0-78.78+fips1

6.8.0-78.78+fips1

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1084.91~20.04.1
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1089.98~20.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1083.92~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1076.79~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1079.85~20.04.1
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-140.150~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1081.87~20.04.1
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1079.83~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-142.152~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1039.39~20.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-140.150
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1084.91
Upgrade
Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1030.32~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1089.98
Upgrade
Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1030.35~22.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1089.98.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1083.92
Upgrade
Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1031.33~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1081.87
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.74
Upgrade
Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-64.67~22.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1076.79
Upgrade
Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1027.27~22.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1079.85
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1080.85
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-140.150
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-62.65.1~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1078.79
Upgrade
Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1029.32~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1037.37
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1026.26
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1081.87
Upgrade
Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1027.28~22.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1078.81
Upgrade
Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-62.65~22.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.54
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.68
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1077.79
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1084.93
Upgrade
Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.1-1023.24~22.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1084.91+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1089.98+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-140.150+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1083.92+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.8.0-62.65
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.8.0-1030.32
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.8.0-1030.35
Upgrade
Upgrade ubuntu/linux-azure-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1018.18~24.04.1
Upgrade
Upgrade ubuntu/linux-azure-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1018.19
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.8.0-1031.33
Upgrade
Upgrade ubuntu/linux-gcp-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1016.16~24.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 6.8.0-1026.30
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 6.8.0-1013.15
Upgrade
Upgrade ubuntu/linux-hwe-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-28.28~24.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 6.8.0-1027.27
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-62.65.1
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1015.16~24.04.2
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1029.32
Upgrade
Upgrade ubuntu/linux-nvidia-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1012.12
Upgrade
Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-1029.32.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 6.8.0-1008.8
Upgrade
Upgrade ubuntu/linux-oem-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1024.24
Upgrade
Upgrade ubuntu/linux-oem-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1029.29
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.8.0-1027.28
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.8.0-1029.33
Upgrade
Upgrade ubuntu/linux-xilinx to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.18
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2024.25
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.8.1-1023.24
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-78.78+fips1
Compensating control
Add try_module_get() to both the new_device_store and delete_device_store handlers to hold a module reference and prevent races with module unload.

Event History

Apr 1, 2025

CVE Published

via OSV·04:15 PM

Data Sourced

via OSV·04:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who is realistically exposed to this issue?

Systems using the gpio-aggregator driver on the listed Ubuntu kernel packages are exposed when they permit local interaction with its sysfs driver attributes and module loading or unloading. The CVSS vector indicates local access and low privileges are required.

What conditions are needed to trigger the failure?

The race requires concurrent use of the gpio-aggregator new_device or delete_device sysfs handlers while the gpio-aggregator module is being unloaded. Exploitation has high attack complexity, but no user interaction is required.

What could happen if the race is triggered?

A module unload can leave a dangling platform device or GPIO forwarder while device creation is in progress. This can produce list corruption and other kernel warnings, and may make the system unstable or unavailable.

What can be done if an update cannot be applied immediately?

Avoid unloading the gpio-aggregator module while processes may write to its new_device or delete_device sysfs attributes. Restrict local access to workflows that create or delete gpio-aggregator devices and prevent concurrent module reload/unload activity.

How can administrators identify a possible occurrence?

Look for kernel warnings beginning with "list_del corruption" during gpio-aggregator device creation or deletion combined with module load/unload activity. Repeated warnings or system instability in that scenario are indicators of the race.

UBUNTU-CVE-2025-21943: Race Condition

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

What conditions are needed to trigger the failure?

What could happen if the race is triggered?

What can be done if an update cannot be applied immediately?

How can administrators identify a possible occurrence?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

What conditions are needed to trigger the failure?

What could happen if the race is triggered?

What can be done if an update cannot be applied immediately?

How can administrators identify a possible occurrence?