CVE-2025-38631

MEDIUM

Linux Kernel - Denial of Service via Clock Runtime PM Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: clk: imx95-blk-ctl: Fix synchronous abort When enabling runtime PM for clock suppliers that also belong to a power domain, the following crash is thrown: error: synchronous external abort: 0000000096000010 [#1] PREEMPT SMP Workqueue: events_unbound deferred_probe_work_func pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : clk_mux_get_parent+0x60/0x90 lr : clk_core_reparent_orphans_nolock+0x58/0xd8 Call trace: clk_mux_get_parent+0x60/0x90 clk_core_reparent_orphans_nolock+0x58/0xd8 of_clk_add_hw_provider.part.0+0x90/0x100 of_clk_add_hw_provider+0x1c/0x38 imx95_bc_probe+0x2e0/0x3f0 platform_probe+0x70/0xd8 Enabling runtime PM without explicitly resuming the device caused the power domain cut off after clk_register() is called. As a result, a crash happens when the clock hardware provider is added and attempts to access the BLK_CTL register. Fix this by using devm_pm_runtime_enable() instead of pm_runtime_enable() and getting rid of the pm_runtime_disable() in the cleanup path.

Scores

CVSS v3 5.5
EPSS 0.0014
EPSS Percentile 4.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (14)
linux/Kernel 6.10.0 - 6.12.42linux
linux/Kernel 6.13.0 - 6.15.10linux
linux/Kernel 6.16.0 - 6.16.1linux
Linux/Linux < 6.10
Linux/Linux 5224b189462ff70df328f173b71acfd925092c3c - 533dc3cb375cabd8a2beba293d63ef2acd3d0005
Linux/Linux 5224b189462ff70df328f173b71acfd925092c3c - 9f0ee0baf25b46bb82655c687718ebb0ae1def7b
Linux/Linux 5224b189462ff70df328f173b71acfd925092c3c - b08217a257215ed9130fce93d35feba66b49bf0a
Linux/Linux 5224b189462ff70df328f173b71acfd925092c3c - c1dead8bb303f86905ea6a09e5acda931165453b
Linux/Linux 6.10
Linux/Linux 6.12.42 - 6.12.*
... and 4 more
Published Aug 22, 2025
Tracked Since Feb 18, 2026