CVE-2025-21871

tee: optee: Fix supplicant wait loop

MEDIUM
5.5
CVSS Score
Published: March 27, 2025 at 01:38 PM UTC
Updated: June 17, 2026 at 08:44 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix supplicant wait loop OP-TEE supplicant is a user-space daemon and it's possible for it be hung or crashed or killed in the middle of processing an OP-TEE RPC call. It becomes more complicated when there is incorrect shutdown ordering of the supplicant process vs the OP-TEE client application which can eventually lead to system hang-up waiting for the closure of the client application. Allow the client process waiting in kernel for supplicant response to be killed rather than indefinitely waiting in an unkillable state. Also, a normal uninterruptible wait should not have resulted in the hung-task watchdog getting triggered, but the endless loop would. This fixes issues observed during system reboot/shutdown when supplicant got hung for some reason or gets crashed/killed which lead to client getting hung in an unkillable state. It in turn lead to system being in hung up state requiring hard power off/on to recover.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.12 ≤ v < 5.10.2354.12 ≤ v < 5.15.1794.12 ≤ v < 5.4.2914.12 ≤ v < 6.1.1304.12 ≤ v < 6.12.174.12 ≤ v < 6.13.54.12 ≤ v < 6.144.12 ≤ v < 6.6.805.11 ≤ v < 5.15.1795.16 ≤ v < 6.1.1305.5 ≤ v < 5.10.2356.13 ≤ v < 6.13.56.2 ≤ v < 6.6.806.7 ≤ v < 6.12.174.124fb0a5eb364d239722e745c02aef0dbd4e0f1ad26.14 rc16.14 rc26.14 rc3
Vendor states this is fixed in 180cf373f84fff61b16f8c62553a13dd7cfca (fixed)
Vendor states this is fixed in 21234efe2a8474a6d2d01ea9573319de7858ce44 (fixed)
Vendor states this is fixed in 3eb4911364c764572e9db4ab900a57689a54e8ce (fixed)
Vendor states this is fixed in 70b0d6b0a199c5a3ee6c72f5e61681ed6f759612 (fixed)
Vendor states this is fixed in c0a9a948159153be145f9471435695373904ee6d (fixed)
Vendor states this is fixed in d61cc1a435e6894bfb0dd3370c6f765d2d12825d (fixed)
Vendor states this is fixed in ec18520f5edc20a00c34a8c9fdd6507c355e880f (fixed)
Vendor states this is fixed in fd9d2d6124c293e40797a080adf8a9c237efd8b8 (fixed)
Vendor states this is fixed in 4.12 (unaffected)
Vendor states this is fixed in 5.10.235 (unaffected)
Vendor states this is fixed in 5.15.179 (unaffected)
Vendor states this is fixed in 5.4.291 (unaffected)
Vendor states this is fixed in 6.1.130 (unaffected)
Vendor states this is fixed in 6.12.17 (unaffected)
Vendor states this is fixed in 6.13.5 (unaffected)
Vendor states this is fixed in 6.14 (unaffected)
Vendor states this is fixed in 6.6.80 (unaffected)

References (10)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0180cf0373f84fff61b16f8c062553a13dd7cfca
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/21234efe2a8474a6d2d01ea9573319de7858ce44
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3eb4911364c764572e9db4ab900a57689a54e8ce
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/70b0d6b0a199c5a3ee6c72f5e61681ed6f759612
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c0a9a948159153be145f9471435695373904ee6d
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d61cc1a435e6894bfb0dd3370c6f765d2d12825d
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/ec18520f5edc20a00c34a8c9fdd6507c355e880f
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/fd9d2d6124c293e40797a080adf8a9c237efd8b8

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-835

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card