CVE-2025-40108

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-40108
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40108.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-40108
Downstream
Published
2025-11-09T04:35:58.587Z
Modified
2025-12-02T08:09:44.748368Z
Summary
serial: qcom-geni: Fix blocked task
Details

In the Linux kernel, the following vulnerability has been resolved:

serial: qcom-geni: Fix blocked task

Revert commit 1afa70632c39 ("serial: qcom-geni: Enable PM runtime for serial driver") and its dependent commit 86fa39dd6fb7 ("serial: qcom-geni: Enable Serial on SA8255p Qualcomm platforms") because the first one causes regression - hang task on Qualcomm RB1 board (QRB2210) and unable to use serial at all during normal boot:

INFO: task kworker/u16:0:12 blocked for more than 42 seconds. Not tainted 6.17.0-rc1-00004-g53e760d89498 #9 "echo 0 > /proc/sys/kernel/hungtasktimeoutsecs" disables this message. task:kworker/u16:0 state:D stack:0 pid:12 tgid:12 ppid:2 taskflags:0x4208060 flags:0x00000010 Workqueue: async asyncrunentryfn Call trace: _switchto+0xe8/0x1a0 (T) _schedule+0x290/0x7c0 schedule+0x34/0x118 rpmresume+0x14c/0x66c rpmresume+0x2a4/0x66c rpmresume+0x2a4/0x66c rpmresume+0x2a4/0x66c _pmruntimeresume+0x50/0x9c _driverprobedevice+0x58/0x120 driverprobedevice+0x3c/0x154 _driverattachasynchelper+0x4c/0xc0 asyncrunentryfn+0x34/0xe0 processonework+0x148/0x290 workerthread+0x2c4/0x3e0 kthread+0x118/0x1c0 retfromfork+0x10/0x20

The issue was reported on 12th of August and was ignored by author of commits introducing issue for two weeks. Only after complaining author produced a fix which did not work, so if original commits cannot be reliably fixed for 5 weeks, they obviously are buggy and need to be dropped.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40108.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1afa70632c390488308d8e94e037df6895a3e1ac
Fixed
1e810d81769e16637bcd845ba37fbc1eba5d4bd2
Fixed
a699213d4e6ef4286348c6439837990f121e0c03

Affected versions

v6.*

v6.16
v6.17
v6.17-rc1
v6.17-rc2
v6.17-rc3
v6.17-rc4
v6.17-rc5
v6.17-rc6
v6.17-rc7
v6.17.1

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.17.0
Fixed
6.17.2