Vulnerability-Lookup

OPENSUSE-SU-2025:15544-1

Vulnerability from csaf_opensuse - Published: 2025-09-11 00:00 - Updated: 2025-09-11 00:00

Summary

kernel-devel-6.16.6-1.1 on GA media

Severity

Moderate

Notes

Title of the patch: kernel-devel-6.16.6-1.1 on GA media

Description of the patch: These are all security issues fixed in the kernel-devel-6.16.6-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2025-15544

CVE-2024-53093

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:kernel-source-6.16.6-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:kernel-source-6.16.6-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:kernel-source-6.16.6-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:kernel-source-6.16.6-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-38216

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-53093

Threats

Impact moderate

References

8 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2024-53093/	self
https://www.suse.com/security/cve/CVE-2025-38216/	self
https://www.suse.com/security/cve/CVE-2024-53093	external
https://bugzilla.suse.com/1233640	external
https://www.suse.com/security/cve/CVE-2025-38216	external
https://bugzilla.suse.com/1245963	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "kernel-devel-6.16.6-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the kernel-devel-6.16.6-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2025-15544",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15544-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-53093 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-53093/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-38216 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-38216/"
      }
    ],
    "title": "kernel-devel-6.16.6-1.1 on GA media",
    "tracking": {
      "current_release_date": "2025-09-11T00:00:00Z",
      "generator": {
        "date": "2025-09-11T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2025:15544-1",
      "initial_release_date": "2025-09-11T00:00:00Z",
      "revision_history": [
        {
          "date": "2025-09-11T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-6.16.6-1.1.aarch64",
                "product": {
                  "name": "kernel-devel-6.16.6-1.1.aarch64",
                  "product_id": "kernel-devel-6.16.6-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-6.16.6-1.1.aarch64",
                "product": {
                  "name": "kernel-macros-6.16.6-1.1.aarch64",
                  "product_id": "kernel-macros-6.16.6-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-6.16.6-1.1.aarch64",
                "product": {
                  "name": "kernel-source-6.16.6-1.1.aarch64",
                  "product_id": "kernel-source-6.16.6-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-6.16.6-1.1.aarch64",
                "product": {
                  "name": "kernel-source-vanilla-6.16.6-1.1.aarch64",
                  "product_id": "kernel-source-vanilla-6.16.6-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-6.16.6-1.1.ppc64le",
                "product": {
                  "name": "kernel-devel-6.16.6-1.1.ppc64le",
                  "product_id": "kernel-devel-6.16.6-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-6.16.6-1.1.ppc64le",
                "product": {
                  "name": "kernel-macros-6.16.6-1.1.ppc64le",
                  "product_id": "kernel-macros-6.16.6-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-6.16.6-1.1.ppc64le",
                "product": {
                  "name": "kernel-source-6.16.6-1.1.ppc64le",
                  "product_id": "kernel-source-6.16.6-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-6.16.6-1.1.ppc64le",
                "product": {
                  "name": "kernel-source-vanilla-6.16.6-1.1.ppc64le",
                  "product_id": "kernel-source-vanilla-6.16.6-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-6.16.6-1.1.s390x",
                "product": {
                  "name": "kernel-devel-6.16.6-1.1.s390x",
                  "product_id": "kernel-devel-6.16.6-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-6.16.6-1.1.s390x",
                "product": {
                  "name": "kernel-macros-6.16.6-1.1.s390x",
                  "product_id": "kernel-macros-6.16.6-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-6.16.6-1.1.s390x",
                "product": {
                  "name": "kernel-source-6.16.6-1.1.s390x",
                  "product_id": "kernel-source-6.16.6-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-6.16.6-1.1.s390x",
                "product": {
                  "name": "kernel-source-vanilla-6.16.6-1.1.s390x",
                  "product_id": "kernel-source-vanilla-6.16.6-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-6.16.6-1.1.x86_64",
                "product": {
                  "name": "kernel-devel-6.16.6-1.1.x86_64",
                  "product_id": "kernel-devel-6.16.6-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-6.16.6-1.1.x86_64",
                "product": {
                  "name": "kernel-macros-6.16.6-1.1.x86_64",
                  "product_id": "kernel-macros-6.16.6-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-6.16.6-1.1.x86_64",
                "product": {
                  "name": "kernel-source-6.16.6-1.1.x86_64",
                  "product_id": "kernel-source-6.16.6-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-6.16.6-1.1.x86_64",
                "product": {
                  "name": "kernel-source-vanilla-6.16.6-1.1.x86_64",
                  "product_id": "kernel-source-vanilla-6.16.6-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-6.16.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.aarch64"
        },
        "product_reference": "kernel-devel-6.16.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-6.16.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.ppc64le"
        },
        "product_reference": "kernel-devel-6.16.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-6.16.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.s390x"
        },
        "product_reference": "kernel-devel-6.16.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-6.16.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.x86_64"
        },
        "product_reference": "kernel-devel-6.16.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-6.16.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.aarch64"
        },
        "product_reference": "kernel-macros-6.16.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-6.16.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.ppc64le"
        },
        "product_reference": "kernel-macros-6.16.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-6.16.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.s390x"
        },
        "product_reference": "kernel-macros-6.16.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-6.16.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.x86_64"
        },
        "product_reference": "kernel-macros-6.16.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-6.16.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.aarch64"
        },
        "product_reference": "kernel-source-6.16.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-6.16.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.ppc64le"
        },
        "product_reference": "kernel-source-6.16.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-6.16.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.s390x"
        },
        "product_reference": "kernel-source-6.16.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-6.16.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.x86_64"
        },
        "product_reference": "kernel-source-6.16.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-6.16.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.aarch64"
        },
        "product_reference": "kernel-source-vanilla-6.16.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-6.16.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.ppc64le"
        },
        "product_reference": "kernel-source-vanilla-6.16.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-6.16.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.s390x"
        },
        "product_reference": "kernel-source-vanilla-6.16.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-6.16.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.x86_64"
        },
        "product_reference": "kernel-source-vanilla-6.16.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-53093",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-53093"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-multipath: defer partition scanning\n\nWe need to suppress the partition scan from occuring within the\ncontroller\u0027s scan_work context. If a path error occurs here, the IO will\nwait until a path becomes available or all paths are torn down, but that\naction also occurs within scan_work, so it would deadlock. Defer the\npartion scan to a different context that does not block scan_work.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-53093",
          "url": "https://www.suse.com/security/cve/CVE-2024-53093"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1233640 for CVE-2024-53093",
          "url": "https://bugzilla.suse.com/1233640"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-09-11T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-53093"
    },
    {
      "cve": "CVE-2025-38216",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-38216"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Restore context entry setup order for aliased devices\n\nCommit 2031c469f816 (\"iommu/vt-d: Add support for static identity domain\")\nchanged the context entry setup during domain attachment from a\nset-and-check policy to a clear-and-reset approach. This inadvertently\nintroduced a regression affecting PCI aliased devices behind PCIe-to-PCI\nbridges.\n\nSpecifically, keyboard and touchpad stopped working on several Apple\nMacbooks with below messages:\n\n kernel: platform pxa2xx-spi.3: Adding to iommu group 20\n kernel: input: Apple SPI Keyboard as\n /devices/pci0000:00/0000:00:1e.3/pxa2xx-spi.3/spi_master/spi2/spi-APP000D:00/input/input0\n kernel: DMAR: DRHD: handling fault status reg 3\n kernel: DMAR: [DMA Read NO_PASID] Request device [00:1e.3] fault addr\n 0xffffa000 [fault reason 0x06] PTE Read access is not set\n kernel: DMAR: DRHD: handling fault status reg 3\n kernel: DMAR: [DMA Read NO_PASID] Request device [00:1e.3] fault addr\n 0xffffa000 [fault reason 0x06] PTE Read access is not set\n kernel: applespi spi-APP000D:00: Error writing to device: 01 0e 00 00\n kernel: DMAR: DRHD: handling fault status reg 3\n kernel: DMAR: [DMA Read NO_PASID] Request device [00:1e.3] fault addr\n 0xffffa000 [fault reason 0x06] PTE Read access is not set\n kernel: DMAR: DRHD: handling fault status reg 3\n kernel: applespi spi-APP000D:00: Error writing to device: 01 0e 00 00\n\nFix this by restoring the previous context setup order.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-38216",
          "url": "https://www.suse.com/security/cve/CVE-2025-38216"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245963 for CVE-2025-38216",
          "url": "https://bugzilla.suse.com/1245963"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-6.16.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-6.16.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-6.16.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-6.16.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-09-11T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-38216"
    }
  ]
}

CVE-2024-53093 (GCVE-0-2024-53093)

Vulnerability from cvelistv5 – Published: 2024-11-21 18:17 – Updated: 2026-08-05 11:43

Title

nvme-multipath: defer partition scanning

Summary

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: defer partition scanning We need to suppress the partition scan from occuring within the controller's scan_work context. If a path error occurs here, the IO will wait until a path becomes available or all paths are torn down, but that action also occurs within scan_work, so it would deadlock. Defer the partion scan to a different context that does not block scan_work.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-10-01 20:11 UTC

CWE

CWE-noinfo Not enough information

Assigner

Linux mitre root

References

5 references

URL	Tags
https://git.kernel.org/stable/c/60de2e03f984cfbcd…
https://git.kernel.org/stable/c/4a57f42e5ed42cb8f…
https://git.kernel.org/stable/c/a91b7eddf45afeeb9…
https://git.kernel.org/stable/c/1f021341eef41e77a…
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 32acab3181c7053c775ca128c3a5c6ce50197d7f , < 60de2e03f984cfbcdc12fa552f95087c35a05a98 (git) Affected: 32acab3181c7053c775ca128c3a5c6ce50197d7f , < 4a57f42e5ed42cb8f1beb262c4f6d3e698939e4e (git) Affected: 32acab3181c7053c775ca128c3a5c6ce50197d7f , < a91b7eddf45afeeb9c5ece11dddff5de0921b00f (git) Affected: 32acab3181c7053c775ca128c3a5c6ce50197d7f , < 1f021341eef41e77a633186e9be5223de2ce5d48 (git)
Linux	Linux	Affected: 4.15 Unaffected: 0 , < 4.15 (semver) Unaffected: 6.1.118 , ≤ 6.1.* (semver) Unaffected: 6.6.62 , ≤ 6.6.* (semver) Unaffected: 6.11.9 , ≤ 6.11.* (semver) Unaffected: 6.12 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-53093",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-01T20:11:24.276538Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-01T20:17:13.381Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:29:08.209Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/nvme/host/multipath.c",
            "drivers/nvme/host/nvme.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "60de2e03f984cfbcdc12fa552f95087c35a05a98",
              "status": "affected",
              "version": "32acab3181c7053c775ca128c3a5c6ce50197d7f",
              "versionType": "git"
            },
            {
              "lessThan": "4a57f42e5ed42cb8f1beb262c4f6d3e698939e4e",
              "status": "affected",
              "version": "32acab3181c7053c775ca128c3a5c6ce50197d7f",
              "versionType": "git"
            },
            {
              "lessThan": "a91b7eddf45afeeb9c5ece11dddff5de0921b00f",
              "status": "affected",
              "version": "32acab3181c7053c775ca128c3a5c6ce50197d7f",
              "versionType": "git"
            },
            {
              "lessThan": "1f021341eef41e77a633186e9be5223de2ce5d48",
              "status": "affected",
              "version": "32acab3181c7053c775ca128c3a5c6ce50197d7f",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/nvme/host/multipath.c",
            "drivers/nvme/host/nvme.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.15"
            },
            {
              "lessThan": "4.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.118",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.62",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.11.*",
              "status": "unaffected",
              "version": "6.11.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.12",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.118",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.62",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11.9",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-multipath: defer partition scanning\n\nWe need to suppress the partition scan from occuring within the\ncontroller\u0027s scan_work context. If a path error occurs here, the IO will\nwait until a path becomes available or all paths are torn down, but that\naction also occurs within scan_work, so it would deadlock. Defer the\npartion scan to a different context that does not block scan_work."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - NVMe multipath heads exist for all NVMe-over-Fabrics subsystems, and a remote NVMe/TCP target reaches this code over a routable TCP connection by sending a Namespace-Changed AEN and then inducing a path error. The entire trigger sequence is delivered as protocol data from a remote peer.\nAC:L - The attacker controls both halves of the condition \u2014 it decides when scan_work runs (NS_CHANGED AEN) and when the path fails (connection drop, error completion, or ANA inaccessible state), so the deadlock window is created rather than waited for. No memory layout or victim state outside attacker influence is needed.\nPR:N - NVMe/TCP has no mandatory authentication or transport security, so a malicious, compromised, or spoofed target needs no credentials on the victim host. The AEN and error-injection path requires no login to the host system at all.\nUI:N - The host connection is a pre-existing configuration state, not an action taken per-attack; the target drives the AEN and path failure asynchronously with no local user involvement.\nS:U - The deadlock is confined to the kernel\u0027s own storage stack within the same security authority \u2014 no VM, IOMMU, or sandbox boundary is crossed.\nC:N - The flaw is a blocking-context deadlock with no out-of-bounds access, freed-object reuse, or uninitialized data exposure, so no information is disclosed.\nI:N - No memory is corrupted and no data is modified; the partition-scan I/O is requeued intact rather than being mis-executed or written incorrectly.\nA:H - scan_work deadlocks permanently while holding ctrl-\u003escan_lock, and every recovery path (nvme_stop_ctrl reset, nvme_remove_namespaces delete/disconnect) does flush_work(\u0026ctrl-\u003escan_work) and hangs too, producing unkillable D-state tasks, hung-task panics, and a permanently inaccessible storage subsystem requiring a reboot."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:43:36.925Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/60de2e03f984cfbcdc12fa552f95087c35a05a98"
        },
        {
          "url": "https://git.kernel.org/stable/c/4a57f42e5ed42cb8f1beb262c4f6d3e698939e4e"
        },
        {
          "url": "https://git.kernel.org/stable/c/a91b7eddf45afeeb9c5ece11dddff5de0921b00f"
        },
        {
          "url": "https://git.kernel.org/stable/c/1f021341eef41e77a633186e9be5223de2ce5d48"
        }
      ],
      "title": "nvme-multipath: defer partition scanning",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-53093",
    "datePublished": "2024-11-21T18:17:09.807Z",
    "dateReserved": "2024-11-19T17:17:24.982Z",
    "dateUpdated": "2026-08-05T11:43:36.925Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-38216 (GCVE-0-2025-38216)

Vulnerability from cvelistv5 – Published: 2025-07-04 13:37 – Updated: 2026-08-05 12:00

Title

iommu/vt-d: Restore context entry setup order for aliased devices

Summary

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restore context entry setup order for aliased devices Commit 2031c469f816 ("iommu/vt-d: Add support for static identity domain") changed the context entry setup during domain attachment from a set-and-check policy to a clear-and-reset approach. This inadvertently introduced a regression affecting PCI aliased devices behind PCIe-to-PCI bridges. Specifically, keyboard and touchpad stopped working on several Apple Macbooks with below messages: kernel: platform pxa2xx-spi.3: Adding to iommu group 20 kernel: input: Apple SPI Keyboard as /devices/pci0000:00/0000:00:1e.3/pxa2xx-spi.3/spi_master/spi2/spi-APP000D:00/input/input0 kernel: DMAR: DRHD: handling fault status reg 3 kernel: DMAR: [DMA Read NO_PASID] Request device [00:1e.3] fault addr 0xffffa000 [fault reason 0x06] PTE Read access is not set kernel: DMAR: DRHD: handling fault status reg 3 kernel: DMAR: [DMA Read NO_PASID] Request device [00:1e.3] fault addr 0xffffa000 [fault reason 0x06] PTE Read access is not set kernel: applespi spi-APP000D:00: Error writing to device: 01 0e 00 00 kernel: DMAR: DRHD: handling fault status reg 3 kernel: DMAR: [DMA Read NO_PASID] Request device [00:1e.3] fault addr 0xffffa000 [fault reason 0x06] PTE Read access is not set kernel: DMAR: DRHD: handling fault status reg 3 kernel: applespi spi-APP000D:00: Error writing to device: 01 0e 00 00 Fix this by restoring the previous context setup order.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Assigner

Linux mitre root

References

3 references

URL	Tags
https://git.kernel.org/stable/c/fb5873b779dd58581…
https://git.kernel.org/stable/c/d43c81b691813e16a…
https://git.kernel.org/stable/c/320302baed05c6456…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 2031c469f8161abe74189cb74f50da224f340b71 , < fb5873b779dd5858123c19bbd6959566771e2e83 (git) Affected: 2031c469f8161abe74189cb74f50da224f340b71 , < d43c81b691813e16a2d08208ce8947aebdab83cd (git) Affected: 2031c469f8161abe74189cb74f50da224f340b71 , < 320302baed05c6456164652541f23d2a96522c06 (git)
Linux	Linux	Affected: 6.12 Unaffected: 0 , < 6.12 (semver) Unaffected: 6.12.35 , ≤ 6.12.* (semver) Unaffected: 6.15.4 , ≤ 6.15.* (semver) Unaffected: 6.16 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/iommu/intel/iommu.c",
            "drivers/iommu/intel/iommu.h",
            "drivers/iommu/intel/nested.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "fb5873b779dd5858123c19bbd6959566771e2e83",
              "status": "affected",
              "version": "2031c469f8161abe74189cb74f50da224f340b71",
              "versionType": "git"
            },
            {
              "lessThan": "d43c81b691813e16a2d08208ce8947aebdab83cd",
              "status": "affected",
              "version": "2031c469f8161abe74189cb74f50da224f340b71",
              "versionType": "git"
            },
            {
              "lessThan": "320302baed05c6456164652541f23d2a96522c06",
              "status": "affected",
              "version": "2031c469f8161abe74189cb74f50da224f340b71",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/iommu/intel/iommu.c",
            "drivers/iommu/intel/iommu.h",
            "drivers/iommu/intel/nested.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.12"
            },
            {
              "lessThan": "6.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.35",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.15.*",
              "status": "unaffected",
              "version": "6.15.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.16",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.35",
                  "versionStartIncluding": "6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.15.4",
                  "versionStartIncluding": "6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.16",
                  "versionStartIncluding": "6.12",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Restore context entry setup order for aliased devices\n\nCommit 2031c469f816 (\"iommu/vt-d: Add support for static identity domain\")\nchanged the context entry setup during domain attachment from a\nset-and-check policy to a clear-and-reset approach. This inadvertently\nintroduced a regression affecting PCI aliased devices behind PCIe-to-PCI\nbridges.\n\nSpecifically, keyboard and touchpad stopped working on several Apple\nMacbooks with below messages:\n\n kernel: platform pxa2xx-spi.3: Adding to iommu group 20\n kernel: input: Apple SPI Keyboard as\n /devices/pci0000:00/0000:00:1e.3/pxa2xx-spi.3/spi_master/spi2/spi-APP000D:00/input/input0\n kernel: DMAR: DRHD: handling fault status reg 3\n kernel: DMAR: [DMA Read NO_PASID] Request device [00:1e.3] fault addr\n 0xffffa000 [fault reason 0x06] PTE Read access is not set\n kernel: DMAR: DRHD: handling fault status reg 3\n kernel: DMAR: [DMA Read NO_PASID] Request device [00:1e.3] fault addr\n 0xffffa000 [fault reason 0x06] PTE Read access is not set\n kernel: applespi spi-APP000D:00: Error writing to device: 01 0e 00 00\n kernel: DMAR: DRHD: handling fault status reg 3\n kernel: DMAR: [DMA Read NO_PASID] Request device [00:1e.3] fault addr\n 0xffffa000 [fault reason 0x06] PTE Read access is not set\n kernel: DMAR: DRHD: handling fault status reg 3\n kernel: applespi spi-APP000D:00: Error writing to device: 01 0e 00 00\n\nFix this by restoring the previous context setup order."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The faulty ordering is reached through local operations that attach or detach IOMMU domains \u2014 driver bind/unbind, device hotplug/probe, or VFIO/iommufd device assignment ioctls \u2014 not through any network-facing path.\nAC:L - On any platform with DMA-aliased devices (PCIe-to-PCI bridge children, or ACPI-scoped non-PCI devices sharing a parent\u0027s source-ID, which land in a separate IOMMU group via generic_device_group()), the clobber is deterministic and repeatable by simply triggering an attach on the sibling device; no race or unpredictable memory layout is involved.\nPR:L - Driving a domain attach requires only low-privileged local access to the device/VFIO interfaces, and in the device-assignment case the beneficiary is an unprivileged guest whose assigned device\u0027s context entry gets reprogrammed by an unrelated host attach.\nUI:N - No victim action is needed \u2014 the mis-ordered clear-and-reset happens automatically during normal device probe and default-domain attachment.\nS:C - This breaks the IOMMU/DMA isolation boundary itself: a shared context entry ends up programmed with another domain\u0027s page tables or with CONTEXT_TT_PASS_THROUGH, so DMA from one security domain reaches memory belonging to a different one (host memory from a guest-assigned device).\nC:H - A device left with the wrong domain\u0027s second-level page tables \u2014 or with pass-through translation \u2014 can DMA-read memory it was never granted, up to all host physical memory in the passthrough case.\nI:H - The same wrong or pass-through context entry grants DMA writes into another domain\u0027s or the host\u0027s physical memory, which is a direct arbitrary-write primitive usable for control-flow hijack; a stale entry can also point at a torn-down domain\u0027s page tables.\nA:H - The demonstrated effect is a DMAR fault storm and permanently dead devices (keyboard and touchpad stop working, \"DRHD: handling fault status reg 3\" flooding), and DMA through freed or wrong page tables can corrupt kernel memory and panic the system."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:00:25.669Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/fb5873b779dd5858123c19bbd6959566771e2e83"
        },
        {
          "url": "https://git.kernel.org/stable/c/d43c81b691813e16a2d08208ce8947aebdab83cd"
        },
        {
          "url": "https://git.kernel.org/stable/c/320302baed05c6456164652541f23d2a96522c06"
        }
      ],
      "title": "iommu/vt-d: Restore context entry setup order for aliased devices",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-38216",
    "datePublished": "2025-07-04T13:37:33.906Z",
    "dateReserved": "2025-04-16T04:51:23.995Z",
    "dateUpdated": "2026-08-05T12:00:25.669Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OPENSUSE-SU-2025:15544-1

CVE-2024-53093 (GCVE-0-2024-53093)

CVE-2025-38216 (GCVE-0-2025-38216)

Tags

Sightings

Nomenclature

Related by attack behaviour