PT-2025-13180 · Linux+6 · Linux Kernel+6
Publicado
2025-02-04
·
Atualizado
2026-04-20
·
CVE-2025-21871
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue concerns the OP-TEE supplicant, a user-space daemon in the Linux kernel, which can become hung, crashed, or killed during an OP-TEE RPC call. This can lead to a system hang-up due to incorrect shutdown ordering between the supplicant process and the OP-TEE client application. The problem allows a client process waiting in the kernel for a supplicant response to be killed, rather than waiting indefinitely. This fix addresses issues observed during system reboot or shutdown when the supplicant gets hung or crashed, resulting in the client becoming unkillable and the system requiring a hard power off/on to recover.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Infinite Loop
Improper Locking
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu