Linux Kernel OP-TEE Driver Notification Vulnerability

CVE-2025-38374

What is CVE-2025-38374?

A vulnerability exists in the OP-TEE driver of the Linux kernel, where the function notif_callback() is incorrectly called in an atomic context. This leads to potential system instability due to a conflict with sleeping function calls while in non-blocking contexts. The resolution requires implementing a work queue to handle notifications properly without disrupting the atomic execution state, thereby improving the stability and reliability of kernel operations.

References