tee: optee: Fix supplicant wait loop (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.22 % · percentile 12 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix supplicant wait loop OP-TEE supplicant is a user-space daemon and it's possible for it be hung or crashed or killed in the middle of processing an OP-TEE RPC call. It becomes more complicated when there is incorrect shutdown ordering of the supplicant process vs the OP-TEE client application which can eventually lead to system hang-up waiting for the closure of the client application. Allow the client process waiting in kernel for supplicant response to be killed rather than indefinitely waiting in an unkillable state. Also, a normal uninterruptible wait should not have resulted in the hung-task watchdog getting triggered, but the endless loop would. This fixes issues observed during system reboot/shutdown when supplicant got hung for some reason or gets crashed/killed which lead to client getting hung in an unkillable state. It in turn lead to system being in hung up state requiring hard power off/on to recover.
Weaknesses (CWE)
- CWE-835 — Loop with Unreachable Exit Condition
References
- https://git.kernel.org/stable/c/3eb4911364c764572e9db4ab900a57689a54e8ce
- https://git.kernel.org/stable/c/0180cf0373f84fff61b16f8c062553a13dd7cfca
- https://git.kernel.org/stable/c/c0a9a948159153be145f9471435695373904ee6d
- https://git.kernel.org/stable/c/ec18520f5edc20a00c34a8c9fdd6507c355e880f
- https://git.kernel.org/stable/c/d61cc1a435e6894bfb0dd3370c6f765d2d12825d
- https://git.kernel.org/stable/c/fd9d2d6124c293e40797a080adf8a9c237efd8b8
- https://git.kernel.org/stable/c/21234efe2a8474a6d2d01ea9573319de7858ce44
- https://git.kernel.org/stable/c/70b0d6b0a199c5a3ee6c72f5e61681ed6f759612
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2025-8431
- GCVE · GCVE-0-2025-21871
CERT-FR advisories
- CERTFR-2025-AVI-0969 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0758 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0743 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0721 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0605 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0559 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0529 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0509 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0463 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0336 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0333 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0307 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.12 < 5.4.291cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.5 < 5.10.235cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11 < 5.15.179cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.16 < 6.1.130cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.2 < 6.6.80cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.7 < 6.12.17cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.13 < 6.13.5cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 4fb0a5eb364d239722e745c02aef0dbd4e0f1ad2 < 3eb4911364c764572e9db4ab900a57689a54e8ce ; affected 4fb0a5eb364d239722e745c02aef0dbd4e0f1ad2 < 0180cf0373f84fff61b16f8c062553a13dd7cfca ; affected 4fb0a5eb364d239722e745c02aef0dbd4e0f1ad2 < c0a9a948159153be145f9471435695373904ee6d ; affected 4fb0a5eb364d239722e745c02aef0dbd4e0f1ad2 < ec18520f5edc20a00c34a8c9fdd6507c355e880f ; affected 4fb0a5eb364d239722e745c02aef0dbd4e0f1ad2 < d61cc1a435e6894bfb0dd3370c6f765d2d12825d ; affected 4fb0a5eb364d239722e745c02aef0dbd4e0f1ad2 < fd9d2d6124c293e40797a080adf8a9c237efd8b8 |
| Linux · Linux | affected 4.12 ; unaffected 0 < 4.12 ; unaffected 5.4.291 ≤ 5.4.* ; unaffected 5.10.235 ≤ 5.10.* ; unaffected 5.15.179 ≤ 5.15.* ; unaffected 6.1.130 ≤ 6.1.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |