Linux Kernel Vulnerability in Clock Management by Vendor

CVE-2025-38631

What is CVE-2025-38631?

A vulnerability exists in the Linux kernel related to the clock management for power domains. When enabling runtime power management for clock suppliers, a synchronous external abort can occur if the device is not explicitly resumed. This can lead to crashes when trying to access the BLK_CTL register, resulting in system instability. The issue can be resolved by utilizing devm_pm_runtime_enable() for proper device management, thereby preventing unintended shutdowns of power domains.

References