CVE-2025-38631
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-38631
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38631.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-38631
- Downstream
- Published
- 2025-08-22T16:00:39.582Z
- Modified
- 2025-12-02T17:29:28.524920Z
- Summary
- clk: imx95-blk-ctl: Fix synchronous abort
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
clk: imx95-blk-ctl: Fix synchronous abort
When enabling runtime PM for clock suppliers that also belong to a power domain, the following crash is thrown: error: synchronous external abort: 0000000096000010 [#1] PREEMPT SMP Workqueue: eventsunbound deferredprobeworkfunc pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : clkmuxgetparent+0x60/0x90 lr : clkcorereparentorphansnolock+0x58/0xd8 Call trace: clkmuxgetparent+0x60/0x90 clkcorereparentorphansnolock+0x58/0xd8 ofclkaddhwprovider.part.0+0x90/0x100 ofclkaddhwprovider+0x1c/0x38 imx95bcprobe+0x2e0/0x3f0 platform_probe+0x70/0xd8
Enabling runtime PM without explicitly resuming the device caused the power domain cut off after clkregister() is called. As a result, a crash happens when the clock hardware provider is added and attempts to access the BLKCTL register.
Fix this by using devmpmruntimeenable() instead of pmruntimeenable() and getting rid of the pmruntime_disable() in the cleanup path.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38631.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/533dc3cb375cabd8a2beba293d63ef2acd3d0005
- https://git.kernel.org/stable/c/9f0ee0baf25b46bb82655c687718ebb0ae1def7b
- https://git.kernel.org/stable/c/b08217a257215ed9130fce93d35feba66b49bf0a
- https://git.kernel.org/stable/c/c1dead8bb303f86905ea6a09e5acda931165453b
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38631.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-38631
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced5224b189462ff70df328f173b71acfd925092c3cFixedc1dead8bb303f86905ea6a09e5acda931165453bFixed9f0ee0baf25b46bb82655c687718ebb0ae1def7bFixed533dc3cb375cabd8a2beba293d63ef2acd3d0005Fixedb08217a257215ed9130fce93d35feba66b49bf0a