Riskcovery

CVE-2025-38576

powerpc/eeh: Make EEH driver device hotplug safe

State
Published
Severity
Not scored
Published
Aug 19, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

powerpc/eeh: Make EEH driver device hotplug safe

Multiple race conditions existed between the PCIe hotplug driver and the EEH driver, leading to a variety of kernel oopses of the same general nature:

<pcie device unplug> <eeh driver trigger> <hotplug removal trigger> <pcie tree reconfiguration> <eeh recovery next step> <oops in EEH driver bus iteration loop>

A second class of oops is also seen when the underlying bus disappears during device recovery.

Refactor the EEH module to be PCI rescan and remove safe. Also clean up a few minor formatting / readability issues.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1c2042c83aa7af10579b71a1fe5e22bbae69f08c to before 502f08831a9afb72dc98a56ae6504da43e93b250Affected
  • 1c2042c83aa7af10579b71a1fe5e22bbae69f08c to before f56e004b781719d8fdf6c9619b15caf2579bc1f2Affected
  • 1c2042c83aa7af10579b71a1fe5e22bbae69f08c to before 59c6d3d81d42bf543c90597b4f38c53d6874c5a1Affected
  • 1c2042c83aa7af10579b71a1fe5e22bbae69f08c to before a426e8a6ae161f51888585b065db0f8f93ab2e16Affected
  • 1c2042c83aa7af10579b71a1fe5e22bbae69f08c to before d2c60a8a387e9fcc28447ef36c03f8e49fd052a6Affected
  • 1c2042c83aa7af10579b71a1fe5e22bbae69f08c to before d42bbd8f30ac38b1ce54715bf08ec3dac18d6b25Affected
  • 1c2042c83aa7af10579b71a1fe5e22bbae69f08c to before 19d5036e7ad766cf212aebec23b9f1d7924a62bcAffected
  • 1c2042c83aa7af10579b71a1fe5e22bbae69f08c to before 1010b4c012b0d78dfb9d3132b49aa2ef024a07a7Affected
LinuxLinux
  • 3.14Affected
  • before 3.14Not affected
  • 5.10.241 through 5.10.*Not affected
  • 5.15.190 through 5.15.*Not affected
  • 6.1.148 through 6.1.*Not affected
  • 6.6.102 through 6.6.*Not affected
  • 6.12.42 through 6.12.*Not affected
  • 6.15.10 through 6.15.*Not affected
  • 6.16.1 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.