[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2025-38374":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":22,"technologies":28,"references":30,"score":34,"epss_score":35,"epss_percentile":36,"is_kev":20,"cisa_kev_date_added":37,"cisa_kev_due_date":37,"cisa_ssvc":38,"attack_mappings":44,"exploits":51},77586,"CVE-2025-38374","EUVD-2025-22629","In the Linux kernel, the following vulnerability has been resolved:\n\noptee: ffa: fix sleep in atomic context\n\nThe OP-TEE driver registers the function notif_callback() for FF-A\nnotifications. However, this function is called in an atomic context\nleading to errors like this when processing asynchronous notifications:\n\n | BUG: sleeping function called from invalid context at kernel\u002Flocking\u002Fmutex.c:258\n | in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 9, name: kworker\u002F0:0\n | preempt_count: 1, expected: 0\n | RCU nest depth: 0, expected: 0\n | CPU: 0 UID: 0 PID: 9 Comm: kworker\u002F0:0 Not tainted 6.14.0-00019-g657536ebe0aa #13\n | Hardware name: linux,dummy-virt (DT)\n | Workqueue: ffa_pcpu_irq_notification notif_pcpu_irq_work_fn\n | Call trace:\n |  show_stack+0x18\u002F0x24 (C)\n |  dump_stack_lvl+0x78\u002F0x90\n |  dump_stack+0x18\u002F0x24\n |  __might_resched+0x114\u002F0x170\n |  __might_sleep+0x48\u002F0x98\n |  mutex_lock+0x24\u002F0x80\n |  optee_get_msg_arg+0x7c\u002F0x21c\n |  simple_call_with_arg+0x50\u002F0xc0\n |  optee_do_bottom_half+0x14\u002F0x20\n |  notif_callback+0x3c\u002F0x48\n |  handle_notif_callbacks+0x9c\u002F0xe0\n |  notif_get_and_handle+0x40\u002F0x88\n |  generic_exec_single+0x80\u002F0xc0\n |  smp_call_function_single+0xfc\u002F0x1a0\n |  notif_pcpu_irq_work_fn+0x2c\u002F0x38\n |  process_one_work+0x14c\u002F0x2b4\n |  worker_thread+0x2e4\u002F0x3e0\n |  kthread+0x13c\u002F0x210\n |  ret_from_fork+0x10\u002F0x20\n\nFix this by adding work queue to process the notification in a\nnon-atomic context.","2025-07-25T13:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":17,"attackComplexity":18,"availabilityImpact":19,"privilegesRequired":18,"confidentialityImpact":17},"UNCHANGED","3.1",5.5,"LOCAL","MEDIUM","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H","NONE","LOW","HIGH",false,[],[23,24,25,26,27],"cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*",[29],"Linux Linux Kernel",[31,32,33],"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F312d02adb959ea199372f375ada06e0186f651e4","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F5f28563f0c6862c99eb115c918421d9b73f137ad","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Ff27cf15783bd60063c6c97434cbd67ebd91d8db5",0.28,0.00164,0.05528,null,{"timestamp":37,"automatable":39,"tech_impact":40,"exploitation":41,"cisa_decision":42,"cisa_remediation_timeline":43},"no","partial","none",{},"FSU",[45],{"name":46,"source":47,"tactics":48,"technique_id":50},"Exploitation for Privilege Escalation","attack_vector",[49],"privilege-escalation","T1068",[]]