In the Linux kernel, the following vulnerability has been resolved:
tee: optee: Fix supplicant wait loop
OP-TEE supplicant is a user-space daemon and it's possible for it be hung or crashed or killed in the middle of processing an OP-TEE RPC call. It becomes more complicated when there is incorrect shutdown ordering of the supplicant process vs the OP-TEE client application which can eventually lead to system hang-up waiting for the closure of the client application.
Allow the client process waiting in kernel for supplicant response to be killed rather than indefinitely waiting in an unkillable state. Also, a normal uninterruptible wait should not have resulted in the hung-task watchdog getting triggered, but the endless loop would.
This fixes issues observed during system reboot/shutdown when supplicant got hung for some reason or gets crashed/killed which lead to client getting hung in an unkillable state. It in turn lead to system being in hung up state requiring hard power off/on to recover.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Jul 1, 2025 | Mar 27, 2025 |
| Suse | — | Upgrade kernel-debugUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade dtb-amdUpgrade dtb-appleUpgrade dtb-qcomUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade dtb-apmUpgrade kernel-default-develUpgrade dtb-exynosUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-rt-livepatch-develUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade gfs2-kmp-rtUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade kernel-debug-develUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-optionalUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade dtb-socionextUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade dtb-armUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-sprdUpgrade kernel-default-manUpgrade dlm-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-64kb-extra | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-generic-6.8Upgrade linux-image-6.11.0-1014-awsUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1051-iotUpgrade linux-image-5.4.0-1146-awsUpgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-bluefieldUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-216-generic-lpaeUpgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.4.0-216-lowlatencyUpgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1120-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-78-genericUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-5.4.0-216-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-5.4.0-1149-gcp-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-oracleUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-osp1Upgrade linux-image-gkeUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-5.4.0-1105-bluefieldUpgrade linux-image-intelUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-raspi2Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1092-ibmUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.4.0-1133-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-azure-fipsUpgrade linux-image-5.4.0-1151-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-5.4.0-1064-xilinx-zynqmpUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-140-fipsUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1151-azure-fipsUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1144-oracleUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-oemUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.4.0-1146-aws-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-oracle-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1149-gcpUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-6.8.0-1035-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1089-azureUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1084-aws | May 20, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub