Linux Kernel Vulnerability Affecting HNS3 Driver Functionality

CVE-2025-21802

Summary

A vulnerability in the Linux kernel's HNS3 driver could lead to system instability during the unloading of drivers. When the HCLGE driver is unloaded, it attempts to disable Single Root I/O Virtualization (SR-IOV) for each AE device node in the list. If the HNS3 driver is concurrently unloaded, it can lead to an unexpected 'oops' error due to the removal of AE device nodes, potentially affecting system reliability. This issue is addressed by implementing a new mutex to safeguard the unloading process, ensuring that the unloading of the HCLGE driver does not conflict with ongoing operations associated with the HNS3 driver.

References