In the Linux kernel, the following vulnerability has been resolved:
i2c: qup: jump out of the loop in case of timeout
Original logic only sets the return value but doesn't jump out of the
loop if the bus is kept active by a client. This is not expected. A
malicious or buggy i2c client can hang the kernel in this case and
should be avoided. This is observed during a long time test with a
PCA953x GPIO extender.
Fix it by changing the logic to not only sets the return value, but also
jumps out of the loop and return to the caller with -ETIMEDOUT.
CVSS
No CVSS.
References
Configurations
No configuration.
History
22 Aug 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-22 16:15
Updated : 2025-08-22 18:08
NVD link : CVE-2025-38671
Mitre link : CVE-2025-38671
CVE.ORG link : CVE-2025-38671
JSON object : View
Products Affected
No product.
CWE
No CWE.