Linux Kernel Vulnerability in QRTR Client Driver for MHI Stacks

CVE-2025-71285

What is CVE-2025-71285?

A vulnerability in the Linux kernel arises from the MHI stack's 'auto_queue' feature for IPCR DL channels, which can lead to race conditions between the MHI stack and client drivers. Specifically, when the auto_queue feature is enabled, the 'dl_callback' could be invoked before complete initialization of the client driver's structures — resulting in a potential NULL pointer dereference. This problem necessitates the removal of the 'auto_queue' feature, forcing the QRTR client driver to manually manage RX buffers. To counteract these race conditions, the QRTR driver should queue RX buffers based on the ring length during probe and appropriately recycle buffers in 'dl_callback' once consumed.

References