In the Linux kernel, the following vulnerability has been resolved:
tee: optee: Fix supplicant wait loop
OP-TEE supplicant is a user-space daemon and it's possible for it be hung or crashed or killed in the middle of processing an OP-TEE RPC call. It becomes more complicated when there is incorrect shutdown ordering of the supplicant process vs the OP-TEE client application which can eventually lead to system hang-up waiting for the closure of the client application.
Allow the client process waiting in kernel for supplicant response to be killed rather than indefinitely waiting in an unkillable state. Also, a normal uninterruptible wait should not have resulted in the hung-task watchdog getting triggered, but the endless loop would.
This fixes issues observed during system reboot/shutdown when supplicant got hung for some reason or gets crashed/killed which lead to client getting hung in an unkillable state. It in turn lead to system being in hung up state requiring hard power off/on to recover.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 1, 2025 | Mar 27, 2025 |
| Suse | — | Upgrade kernel-default-optionalUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade kernel-symsUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-amdUpgrade dtb-appleUpgrade gfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade dtb-broadcomUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade kernel-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade kernel-rt-livepatch-develUpgrade dtb-lgUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade kernel-rt_debug-develUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-default-manUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-allwinnerUpgrade kernel-rt-optionalUpgrade dlm-kmp-azureUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade kernel-azureUpgrade kernel-defaultUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azure | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-generic-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1146-awsUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1051-iotUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-nvidiaUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1105-bluefieldUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1133-kvmUpgrade linux-image-azure-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1120-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-216-generic-lpaeUpgrade linux-image-5.4.0-216-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-5.4.0-216-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-azure-cvmUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1092-ibmUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-5.4.0-1151-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-ibmUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-5.4.0-1064-xilinx-zynqmpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-osp1Upgrade linux-image-gke-5.15Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-raspi2Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-5.4.0-1149-gcp-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-intelUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-aws-64kUpgrade linux-image-oem-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-oem-20.04dUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-6.8.0-1035-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1146-aws-fipsUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-5.4.0-1151-azure-fipsUpgrade linux-image-5.4.0-1144-oracleUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-awsUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-5.4.0-1149-gcpUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-raspi-6.8Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gke-6.8Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azureUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-fipsUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-22.04cUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1089-azureUpgrade linux-image-generic-hwe-20.04 | May 20, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub