In the Linux kernel, the following vulnerability has been resolved:
tee: optee: Fix supplicant wait loop
OP-TEE supplicant is a user-space daemon and it's possible for it be hung or crashed or killed in the middle of processing an OP-TEE RPC call. It becomes more complicated when there is incorrect shutdown ordering of the supplicant process vs the OP-TEE client application which can eventually lead to system hang-up waiting for the closure of the client application.
Allow the client process waiting in kernel for supplicant response to be killed rather than indefinitely waiting in an unkillable state. Also, a normal uninterruptible wait should not have resulted in the hung-task watchdog getting triggered, but the endless loop would.
This fixes issues observed during system reboot/shutdown when supplicant got hung for some reason or gets crashed/killed which lead to client getting hung in an unkillable state. It in turn lead to system being in hung up state requiring hard power off/on to recover.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Jul 1, 2025 | Mar 27, 2025 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-exynosUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade kernel-syms-azureUpgrade kernel-default-optionalUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-develUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade dtb-xilinxUpgrade dtb-broadcomUpgrade kernel-devel-rtUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-azureUpgrade kernel-rt-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-rockchip | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1146-aws-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oemUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-5.4.0-1151-azure-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-6.8.0-1035-awsUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-azureUpgrade linux-image-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-5.15.0-1089-azureUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-1144-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-oracle-6.8Upgrade linux-image-5.4.0-1149-gcpUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-virtual-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1092-ibmUpgrade linux-image-5.4.0-216-genericUpgrade linux-image-5.4.0-216-lowlatencyUpgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-gcpUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-5.4.0-1120-fipsUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-azure-fde-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.4.0-1149-gcp-fipsUpgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.4.0-1051-iotUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-raspi2Upgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-5.4.0-216-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-ibmUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-5.4.0-1064-xilinx-zynqmpUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-5.4.0-1105-bluefieldUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-5.4.0-1146-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-5.4.0-1151-azureUpgrade linux-image-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.4.0-1133-kvm | May 20, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub