Critical Race Condition in Linux Kernel: MHI Host Buffer Queueing Vulnerability
Summary
CVE-2025-23151: In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix race between unprepare and queue_buf A client driver may use mhi_unprepare_from_transfer() to quiesce incoming data during the clien... Affects linux versions < 6.1.135-1. Fixed in 6.1.135-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core of many operating systems, providing essential services for hardware and software interactions. It is known for its stability, performance, and flexibility, supporting a wide range of devices and applications. However, it is also susceptible to vulnerabilities that can compromise system integrity. This specific vulnerability affects the MHI (Mobile Host Interface) subsystem, which is responsible for managing data transfer between the host and mobile devices.
Vulnerability Detail
In the Linux kernel, a race condition exists between the unpreparation of a channel and the queuing of buffers. When a client driver calls mhi_unprepare_from_transfer() to stop incoming data during its teardown process, it may simultaneously process data, leading to a call to mhi_queue_buf(). If mhi_gen_tre() executes after the channel has been torn down, it can cause a panic due to an invalid dereference, resulting in a page fault. This vulnerability arises because mhi_gen_tre() does not check the channel state after acquiring a lock, allowing access to deinitialized data.
How To Fix
Minimum fixed version
6.1.135-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available to mitigate risks.
Conclusion
The identified vulnerability in the Linux kernel's MHI subsystem poses a significant risk due to a race condition that can lead to system crashes. It is essential to apply the available patch promptly to ensure system stability and security. Regular updates and monitoring for vulnerabilities are critical practices for maintaining a secure environment.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to system crashes due to a panic caused by invalid memory access, potentially disrupting services and affecting system stability.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Yes, the vulnerability affects specific versions of the Linux kernel, particularly those prior to the patched version 6.1.135-1 for Debian 12.
While there are no specific workarounds, it is crucial to plan for an update as soon as possible to avoid potential system crashes.
It is advisable to check for updates regularly, at least once a month, or whenever a new security advisory is released.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
