CVE-2025-38388

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context The current use of a mutex to protect the notifier hashtable accesses can lead to issues in the atomic context. It results in the below kernel warnings: | BUG: sleeping function called from invalid context at kernel/locking/mutex.c:258 | in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 9, name: kworker/0:0 | preempt_count: 1, expected: 0 | RCU nest depth: 0, expected: 0 | CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.14.0 #4 | Workqueue: ffa_pcpu_irq_notification notif_pcpu_irq_work_fn | Call trace: | show_stack+0x18/0x24 (C) | dump_stack_lvl+0x78/0x90 | dump_stack+0x18/0x24 | __might_resched+0x114/0x170 | __might_sleep+0x48/0x98 | mutex_lock+0x24/0x80 | handle_notif_callbacks+0x54/0xe0 | notif_get_and_handle+0x40/0x88 | generic_exec_single+0x80/0xc0 | smp_call_function_single+0xfc/0x1a0 | notif_pcpu_irq_work_fn+0x2c/0x38 | process_one_work+0x14c/0x2b4 | worker_thread+0x2e4/0x3e0 | kthread+0x13c/0x210 | ret_from_fork+0x10/0x20 To address this, replace the mutex with an rwlock to protect the notifier hashtable accesses. This ensures that read-side locking does not sleep and multiple readers can acquire the lock concurrently, avoiding unnecessary contention and potential deadlocks. Writer access remains exclusive, preserving correctness. This change resolves warnings from lockdep about potential sleep in atomic context.

• CWE-667

• https://git.kernel.org/stable/c/31405510a48dcf054abfa5b7b8d70ce1b27d1f13Patch
• https://git.kernel.org/stable/c/8986f8f61b482c0e6efd28f0b2423d9640c20eb1Patch
• https://git.kernel.org/stable/c/9ca7a421229bbdfbe2e1e628cff5cfa782720a10Patch

Published

Jul 25, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-38382In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38383In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2025-38384In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38385In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38386In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38387In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38389In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-3839A flaw was found in Epiphany, a tool that allows websites to…8
• CVE-2025-38390In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38391In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38392In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38393In the Linux kernel, the following vulnerability has been re…4.7