Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: ensure worker is torn down When an IRQ worker is running, unplugging the device would cause a crash. The sealevel hardware this driver was written for was not hotpluggable, so I never realized it. This change uses a spinlock to protect a list of workers, which it tears down on disconnect.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 6.13, < 6.18.6 |
References
- https://git.kernel.org/stable/c/179ef1127d7a4f09f0e741fa9f30b8a8e7886271Patch
- https://git.kernel.org/stable/c/472d900c8bcac301ae0e40fdca7db799bd989ff5Patch
FAQ
What is CVE-2025-71158?
CVE-2025-71158 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: ensure worker is torn down When an IRQ worker is running, unplugging the device would cause a crash. The sealevel har...
How severe is CVE-2025-71158?
CVE-2025-71158 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-71158?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.