CVE-2025-38671
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-38671
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38671.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-38671
- Downstream
- Related
- Published
- 2025-08-22T16:15:42Z
- Modified
- 2025-09-06T13:01:50Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
i2c: qup: jump out of the loop in case of timeout
Original logic only sets the return value but doesn't jump out of the loop if the bus is kept active by a client. This is not expected. A malicious or buggy i2c client can hang the kernel in this case and should be avoided. This is observed during a long time test with a PCA953x GPIO extender.
Fix it by changing the logic to not only sets the return value, but also jumps out of the loop and return to the caller with -ETIMEDOUT.
- References
-
- https://git.kernel.org/stable/c/0d33913fce67a93c1eb83396c3c9d6b411dcab33
- https://git.kernel.org/stable/c/42c4471b30fa203249f476dd42321cd7efb7f6a8
- https://git.kernel.org/stable/c/89459f168b78e5c801dc8b7ad037b62898bc4f57
- https://git.kernel.org/stable/c/a7982a14b3012527a9583d12525cd0dc9f8d8934
- https://git.kernel.org/stable/c/acfa2948be630ad857535cb36153697f3cbf9ca9
- https://git.kernel.org/stable/c/c523bfba46c4b4d7676fb050909533a766698ecd
- https://git.kernel.org/stable/c/cbec4406998185e0311ae97dfacc649f9cd79b0b
- https://git.kernel.org/stable/c/d05ec13aa3eb868a60dc961b489053a643863ddc