In the Linux kernel, the following vulnerability has been resolved:
tee: optee: Fix supplicant wait loop
OP-TEE supplicant is a user-space daemon and it's possible for it be hung or crashed or killed in the middle of processing an OP-TEE RPC call. It becomes more complicated when there is incorrect shutdown ordering of the supplicant process vs the OP-TEE client application which can eventually lead to system hang-up waiting for the closure of the client application.
Allow the client process waiting in kernel for supplicant response to be killed rather than indefinitely waiting in an unkillable state. Also, a normal uninterruptible wait should not have resulted in the hung-task watchdog getting triggered, but the endless loop would.
This fixes issues observed during system reboot/shutdown when supplicant got hung for some reason or gets crashed/killed which lead to client getting hung in an unkillable state. It in turn lead to system being in hung up state requiring hard power off/on to recover.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Jul 1, 2025 | Mar 27, 2025 |
| Suse | — | Upgrade dtb-armUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade dtb-mediatekUpgrade kernel-default-manUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-obs-buildUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade kernel-azureUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade kernel-kvmsmallUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade dtb-lgUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-debugUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade dtb-appleUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade dtb-apmUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade kernel-obs-qaUpgrade kernel-default-extra | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-22.04cUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-genericUpgrade linux-image-5.4.0-1146-aws-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-oemUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-gke-6.8Upgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1089-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1035-awsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1144-oracleUpgrade linux-image-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azureUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1149-gcpUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-140-fipsUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-5.4.0-1151-azure-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.4.0-1151-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-5.4.0-1133-kvmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-ibm-classicUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1092-ibmUpgrade linux-image-raspi2Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-5.15.0-142-genericUpgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1149-gcp-fipsUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1105-bluefieldUpgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1051-iotUpgrade linux-image-5.4.0-1146-awsUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1120-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-bluefieldUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-5.4.0-216-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-216-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-virtualUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-78-genericUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-5.4.0-216-generic-lpaeUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-5.4.0-1064-xilinx-zynqmpUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1084-realtime | May 20, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub