{"id":"CVE-2025-38374","summary":"optee: ffa: fix sleep in atomic context","details":"In the Linux kernel, the following vulnerability has been resolved:\n\noptee: ffa: fix sleep in atomic context\n\nThe OP-TEE driver registers the function notif_callback() for FF-A\nnotifications. However, this function is called in an atomic context\nleading to errors like this when processing asynchronous notifications:\n\n | BUG: sleeping function called from invalid context at kernel/locking/mutex.c:258\n | in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 9, name: kworker/0:0\n | preempt_count: 1, expected: 0\n | RCU nest depth: 0, expected: 0\n | CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.14.0-00019-g657536ebe0aa #13\n | Hardware name: linux,dummy-virt (DT)\n | Workqueue: ffa_pcpu_irq_notification notif_pcpu_irq_work_fn\n | Call trace:\n |  show_stack+0x18/0x24 (C)\n |  dump_stack_lvl+0x78/0x90\n |  dump_stack+0x18/0x24\n |  __might_resched+0x114/0x170\n |  __might_sleep+0x48/0x98\n |  mutex_lock+0x24/0x80\n |  optee_get_msg_arg+0x7c/0x21c\n |  simple_call_with_arg+0x50/0xc0\n |  optee_do_bottom_half+0x14/0x20\n |  notif_callback+0x3c/0x48\n |  handle_notif_callbacks+0x9c/0xe0\n |  notif_get_and_handle+0x40/0x88\n |  generic_exec_single+0x80/0xc0\n |  smp_call_function_single+0xfc/0x1a0\n |  notif_pcpu_irq_work_fn+0x2c/0x38\n |  process_one_work+0x14c/0x2b4\n |  worker_thread+0x2e4/0x3e0\n |  kthread+0x13c/0x210\n |  ret_from_fork+0x10/0x20\n\nFix this by adding work queue to process the notification in a\nnon-atomic context.","modified":"2026-04-02T12:47:57.224964Z","published":"2025-07-25T12:53:16.785Z","related":["SUSE-SU-2025:21074-1","SUSE-SU-2025:21139-1","SUSE-SU-2025:21179-1","openSUSE-SU-2025:20081-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38374.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/312d02adb959ea199372f375ada06e0186f651e4"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5f28563f0c6862c99eb115c918421d9b73f137ad"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f27cf15783bd60063c6c97434cbd67ebd91d8db5"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38374.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38374"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"d0476a59de064205f4aaa8f7c6d6f32bc28a44d4"},{"fixed":"5f28563f0c6862c99eb115c918421d9b73f137ad"},{"fixed":"f27cf15783bd60063c6c97434cbd67ebd91d8db5"},{"fixed":"312d02adb959ea199372f375ada06e0186f651e4"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38374.json"}}],"schema_version":"1.7.5"}