Description
In the Linux kernel, the following vulnerability has been resolved:
pmdomain: imx8mp-blk-ctrl: add missing loop break condition
Currently imx8mp_blk_ctrl_remove() will continue the for loop
until an out-of-bounds exception occurs.
pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : dev_pm_domain_detach+0x8/0x48
lr : imx8mp_blk_ctrl_shutdown+0x58/0x90
sp : ffffffc084f8bbf0
x29: ffffffc084f8bbf0 x28: ffffff80daf32ac0 x27: 0000000000000000
x26: ffffffc081658d78 x25: 0000000000000001 x24: ffffffc08201b028
x23: ffffff80d0db9490 x22: ffffffc082340a78 x21: 00000000000005b0
x20: ffffff80d19bc180 x19: 000000000000000a x18: ffffffffffffffff
x17: ffffffc080a39e08 x16: ffffffc080a39c98 x15: 4f435f464f006c72
x14: 0000000000000004 x13: ffffff80d0172110 x12: 0000000000000000
x11: ffffff80d0537740 x10: ffffff80d05376c0 x9 : ffffffc0808ed2d8
x8 : ffffffc084f8bab0 x7 : 0000000000000000 x6 : 0000000000000000
x5 : ffffff80d19b9420 x4 : fffffffe03466e60 x3 : 0000000080800077
x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000
Call trace:
dev_pm_domain_detach+0x8/0x48
platform_shutdown+0x2c/0x48
device_shutdown+0x158/0x268
kernel_restart_prepare+0x40/0x58
kernel_kexec+0x58/0xe8
__do_sys_reboot+0x198/0x258
__arm64_sys_reboot+0x2c/0x40
invoke_syscall+0x5c/0x138
el0_svc_common.constprop.0+0x48/0xf0
do_el0_svc+0x24/0x38
el0_svc+0x38/0xc8
el0t_64_sync_handler+0x120/0x130
el0t_64_sync+0x190/0x198
Code: 8128c2d0 ffffffc0 aa1e03e9 d503201f
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 5.19 | 6.1.127 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.12.11-1 | — |
| Debian 13 | linux | 6.12.11-1 | — |
| Debian 12 | linux | 6.1.128-1 | DSA-5860-1 |
| Debian 11 | linux-6.1 | 6.1.128-1~deb11u1 | DLA-4076-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux | 6.8.0-62.65 | USN-7595-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1030.32 | USN-7595-1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1030.35 | USN-7596-1 |
| Ubuntu 24.04 LTS | linux-azure-nvidia | 6.8.0-1018.19 | USN-7596-2 |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1031.33 | USN-7595-5 |
| Ubuntu 24.04 LTS | linux-gcp-6.11 +1 | 6.11.0-1013.13~24.04.1 | USN-7448-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1026.30 | USN-7595-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1013.15 | USN-7595-1 |
| Ubuntu 24.04 LTS | linux-hwe-6.11 | 6.11.0-24.24~24.04.1 | USN-7445-1 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1027.27 | USN-7595-1 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-62.65.1 | USN-7595-1 |
| Ubuntu 24.04 LTS | linux-lowlatency-hwe-6.11 | 6.11.0-1012.13~24.04.1 | USN-7445-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1029.32 | USN-7595-1 |
| Ubuntu 24.04 LTS | linux-nvidia-6.11 | 6.11.0-1007.7 | — |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1029.32.1 | USN-7595-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1008.8 | — |
| Ubuntu 24.04 LTS | linux-oem-6.11 | 6.11.0-1020.20 | USN-7445-1 |
| Ubuntu 24.04 LTS | linux-oem-6.8 | 6.8.0-1029.29 | USN-7595-1 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1027.28 | USN-7595-4 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1029.33 | USN-7595-4 |
| Ubuntu 24.04 LTS | linux-riscv +2 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1017.18 | — |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1030.32~22.04.1 | USN-7595-1 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1030.35~22.04.1 | USN-7596-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1031.33~22.04.1 | USN-7595-5 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | 6.8.0-64.67~22.04.1 | USN-7653-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1027.27~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-62.65.1~22.04.1 | USN-7595-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1029.32~22.04.1 | USN-7595-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1027.28~22.04.1 | USN-7595-4 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.8 | 6.8.0-62.65~22.04.1 | — |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2024.25 | USN-7595-3 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1023.24 | USN-7595-2 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1023.24~22.04.1 | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-78.78+fips1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | rv +77 | 5.14.0-570.12.1.el9_6 | RHSA-2025:6966 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | kernel-64kb +3 | 6.4.0-150600.23.42.2 | SUSE-SU-2025:0856-1 |
| SLES 15 SP6 | kernel-azure +2 | 6.4.0-150600.8.31.1 | SUSE-SU-2025:0847-1 |
| SLES 15 SP6 | kernel-coco +3 | 6.4.0-15061.15.coco15sp6.1 | SUSE-SU-2025:0564-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.42.2.150600.12.18.4 | SUSE-SU-2025:0856-1 |
| SLES 15 SP6 | kernel-docs +2 | 6.4.0-150600.23.42.1 | SUSE-SU-2025:0856-1 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Micro 6.1 | kernel-default-base | 6.4.0-28.1.21.6 | SUSE-SU-2025:20270-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_6 +1 | 1-3.1 | SUSE-SU-2025:20270-1, SUSE-SU-2025:20260-1 |
| SLE Micro 6.1 | kernel-rt +4 | 6.4.0-28.1 | SUSE-SU-2025:20270-1, SUSE-SU-2025:20260-1 |
| SLE Micro 6.0 | kernel-default-base | 6.4.0-28.1.21.6 | SUSE-SU-2025:20192-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_6 +1 | 1-3.1 | SUSE-SU-2025:20192-1, SUSE-SU-2025:20190-1 |
| SLE Micro 6.0 | kernel-rt +4 | 6.4.0-28.1 | SUSE-SU-2025:20192-1, SUSE-SU-2025:20190-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.42.2 | SUSE-SU-2025:0856-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_9 | 1-150600.1.3.2 | SUSE-SU-2025:0955-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_9 | 1-150600.13.3.4 | SUSE-SU-2025:0856-1 |
| SUSE Real Time Module 15 SP6 | kernel-rt +3 | 6.4.0-150600.10.29.1 | SUSE-SU-2025:0955-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.6 | dtb-aarch64 +4 | 6.4.0-150600.23.42.1 | SUSE-SU-2025:0856-1 |
| openSUSE Leap 15.6 | kernel-64kb +5 | 6.4.0-150600.23.42.2 | SUSE-SU-2025:0856-1 |
| openSUSE Leap 15.6 | kernel-azure +2 | 6.4.0-150600.8.31.1 | SUSE-SU-2025:0847-1 |
| openSUSE Leap 15.6 | kernel-default-base | 6.4.0-150600.23.42.2.150600.12.18.4 | SUSE-SU-2025:0856-1 |
| openSUSE Leap 15.6 | kernel-rt +3 | 6.4.0-150600.10.29.1 | SUSE-SU-2025:0955-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | bpftool | 7.5.0-802.el9_6 | ELSA-2025-6966 |
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-101.33.4.3.el10uek | ELSA-2025-20530, ELSA-2025-20480 |
| Oracle Linux 9 | rv +28 | 5.14.0-570.12.1.0.1.el9_6 | ELSA-2025-6966 |
Advisories 26
- RHSA-2025:6966 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- USN-7653-1 linux-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7595-1 linux, linux-aws, linux-aws-6.8, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oem-6.8 vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
- USN-7595-4 linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
- USN-7595-3 linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
- USN-7445-1 linux, linux-aws, linux-gcp, linux-hwe-6.11, linux-lowlatency, linux-lowlatency-hwe-6.11, linux-oem-6.11, linux-oracle, linux-raspi, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
- USN-7448-1 linux-azure, linux-azure-6.11 vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
- USN-7595-5 linux-gcp, linux-gcp-6.8 vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
- USN-7595-2 linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
- USN-7596-2 linux-azure-nvidia vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7596-1 linux-azure, linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- WID-SEC-2025-1439 Dell Secure Connect Gateway: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Oct 11, 2026
- WID-SEC-2025-0232 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Sep 3, 2026
- SUSE-SU-2025:20270-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20192-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20260-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20190-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- DSA-5860-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-4076-1 linux-6.1 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2025:0856-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0564-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0955-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0847-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- ELSA-2025-20530 Important: Unbreakable Enterprise kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Aug 18, 2025
- ELSA-2025-20480 Important: Unbreakable Enterprise kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jul 17, 2025
- ELSA-2025-6966 Moderate: kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · May 16, 2025