{"cve":"CVE-2025-38374","nvd":{"published":"2025-07-25T13:15:26.400","modified":"2026-06-17T09:16:43.880","status":"Analyzed","description":"In the Linux kernel, the following vulnerability has been resolved:\n\noptee: ffa: fix sleep in atomic context\n\nThe OP-TEE driver registers the function notif_callback() for FF-A\nnotifications. However, this function is called in an atomic context\nleading to errors like this when processing asynchronous notifications:\n\n | BUG: sleeping function called from invalid context at kernel/locking/mutex.c:258\n | in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 9, name: kworker/0:0\n | preempt_count: 1, expected: 0\n | RCU nest depth: 0, expected: 0\n | CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.14.0-00019-g657536ebe0aa #13\n | Hardware name: linux,dummy-virt (DT)\n | Workqueue: ffa_pcpu_irq_notification notif_pcpu_irq_work_fn\n | Call trace:\n |  show_stack+0x18/0x24 (C)\n |  dump_stack_lvl+0x78/0x90\n |  dump_stack+0x18/0x24\n |  __might_resched+0x114/0x170\n |  __might_sleep+0x48/0x98\n |  mutex_lock+0x24/0x80\n |  optee_get_msg_arg+0x7c/0x21c\n |  simple_call_with_arg+0x50/0xc0\n |  optee_do_bottom_half+0x14/0x20\n |  notif_callback+0x3c/0x48\n |  handle_notif_callbacks+0x9c/0xe0\n |  notif_get_and_handle+0x40/0x88\n |  generic_exec_single+0x80/0xc0\n |  smp_call_function_single+0xfc/0x1a0\n |  notif_pcpu_irq_work_fn+0x2c/0x38\n |  process_one_work+0x14c/0x2b4\n |  worker_thread+0x2e4/0x3e0\n |  kthread+0x13c/0x210\n |  ret_from_fork+0x10/0x20\n\nFix this by adding work queue to process the notification in a\nnon-atomic context.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","score":5.5},"cwes":[],"references":["https://git.kernel.org/stable/c/312d02adb959ea199372f375ada06e0186f651e4","https://git.kernel.org/stable/c/5f28563f0c6862c99eb115c918421d9b73f137ad","https://git.kernel.org/stable/c/f27cf15783bd60063c6c97434cbd67ebd91d8db5"],"products":["linux:linux_kernel"],"source":"nvd","synced_at":"2026-10-19T22:05:46.678065081+00:00"},"epss":{"cve":"CVE-2025-38374","score":0.00176,"percentile":0.07058,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}