CVE-2025-22078

staging: vchiq_arm: Fix possible NPR of keep-alive thread

MEDIUM
5.5
CVSS Score
Published: April 16, 2025 at 02:12 PM UTC
Updated: June 17, 2026 at 08:44 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: staging: vchiq_arm: Fix possible NPR of keep-alive thread In case vchiq_platform_conn_state_changed() is never called or fails before driver removal, ka_thread won't be a valid pointer to a task_struct. So do the necessary checks before calling kthread_stop to avoid a crash.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.11 ≤ v < 6.12.236.11 ≤ v < 6.13.116.11 ≤ v < 6.14.26.11 ≤ v < 6.156.13 ≤ v < 6.13.116.14 ≤ v < 6.14.26.11863a756aaf49ed23d25bbb1dad999a85f09e1836
Vendor states this is fixed in 1817c4b85011998604e5ff9a80a6e01adb7e7e81 (fixed)
Vendor states this is fixed in 3db89bc6d973e2bcaa852f6409c98c228f39a926 (fixed)
Vendor states this is fixed in a915c896f95a989a7759a73f8c064f5dc3775175 (fixed)
Vendor states this is fixed in bd38395b901327f77a82112f006240de22cf2ceb (fixed)
Vendor states this is fixed in 6.11 (unaffected)
Vendor states this is fixed in 6.12.23 (unaffected)
Vendor states this is fixed in 6.13.11 (unaffected)
Vendor states this is fixed in 6.14.2 (unaffected)
Vendor states this is fixed in 6.15 (unaffected)

References (4)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/1817c4b85011998604e5ff9a80a6e01adb7e7e81
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3db89bc6d973e2bcaa852f6409c98c228f39a926
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a915c896f95a989a7759a73f8c064f5dc3775175
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/bd38395b901327f77a82112f006240de22cf2ceb

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card