CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCVE-2025-38576
Medium (5.5). EPSS 0.2% chance of exploitation in the next 30 days.
In the Linux kernel, the following vulnerability has been resolved:
powerpc/eeh: Make EEH driver device hotplug safe
Multiple race conditions existed between the PCIe hotplug driver and the
EEH driver, leading to a variety of kernel oopses of the same general
nature:
<pcie device unplug>
<eeh driver trigger>
<hotplug removal trigger>
<pcie tree reconfiguration>
<eeh recovery next step>
<oops in EEH driver bus iteration loop>
A second class of oops is also seen when the underlying bus disappears
during device recovery.
Refactor the EEH module to be PCI rescan and remove safe. Also clean
up a few minor formatting / readability issues.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- debian:debian_linux
- linux:linux_kernel
References
- https://git.kernel.org/stable/c/1010b4c012b0d78dfb9d3132b49aa2ef024a07a7
- https://git.kernel.org/stable/c/19d5036e7ad766cf212aebec23b9f1d7924a62bc
- https://git.kernel.org/stable/c/502f08831a9afb72dc98a56ae6504da43e93b250
- https://git.kernel.org/stable/c/59c6d3d81d42bf543c90597b4f38c53d6874c5a1
- https://git.kernel.org/stable/c/a426e8a6ae161f51888585b065db0f8f93ab2e16