PT-2025-22229 · Linux+6 · Linux Kernel+6
Published
2025-04-07
·
Updated
2026-04-20
·
CVE-2025-37968
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A deadlock issue in the Linux kernel has been identified, specifically in the iio: light: opt3001 driver. The threaded IRQ function is prone to a deadlock due to concurrent flag access. This occurs when the flag is read twice, once to lock a mutex and once to unlock it, potentially resulting in the mutex not being unlocked. The issue arises from subtle cases where the flag could be true at the mutex lock stage and false at the mutex unlock stage.
Recommendations
To resolve this issue, the opt3001 irq() code should be made more robust by reading the flag into a variable and using the variable value at both stages.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu