CVE-2025-23151 bus: mhi: host: Fix race between unprepare and queue_buf
A race condition in the Linux kernel MHI host driver can cause a system panic when unpreparing and queueing buffers concurrently.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-23151?
CVE-2025-23151 is a high-severity vulnerability in Debian Debian Linux, published on 1 May 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
bus: mhi: host: Fix race between unprepare and queue_buf
A client driver may use mhi_unprepare_from_transfer() to quiesce incoming data during the client driver's tear down. The client driver might also be processing data at the same time, resulting in a call to mhi_queue_buf() which will invoke mhi_gen_tre(). If mhi_gen_tre() runs after mhi_unprepare_from_transfer() has torn down the channel, a panic will occur due to an invalid dereference leading to a page fault.
This occurs because mhi_gen_tre() does not verify the channel state after locking it. Fix this by having mhi_gen_tre() confirm the channel state is valid, or return error to avoid accessing deinitialized data.
[mani: added stable tag]
Weakness: CWE-362
Which versions are affected by CVE-2025-23151?
It affects 2 products.
Products include Debian Debian Linux, Linux kernel.
How do I fix CVE-2025-23151?
Apply the vendor's patch.
Is CVE-2025-23151 being exploited?
There is no known exploitation of CVE-2025-23151 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as BELL-CVE-2025-23151, DEBIAN-CVE-2025-23151, GHSA-53c5-74px-fwch, ROOT-OS-DEBIAN-12-CVE-2025-23151, ROOT-OS-UBUNTU-2204-CVE-2025-23151, ROOT-OS-UBUNTU-2404-CVE-2025-23151 and 1 more.