cveboard RSS feed

CVE-2025-38623

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

PCI: pnv_php: Fix surprise plug detection and recovery

In the Linux kernel, the following vulnerability has been resolved: PCI: pnv_php: Fix surprise plug detection and recovery The existing PowerNV hotplug code did not handle surprise plug events correctly, leading to a complete failure of the hotplug system after device removal and a required reboot to detect new devices. This comes down to two issues: 1) When a device is surprise removed, often the bridge upstream port will cause a PE freeze on the PHB. If this freeze is not cleared, the MSI interrupts from the bridge hotplug notification logic will not be received by the kernel, stalling all plug events on all slots associated with the PE. 2) When a device is removed from a slot, regardless of surprise or programmatic removal, the associated PHB/PE ls left frozen. If this freeze is not cleared via a fundamental reset, skiboot is unable to clear the freeze and cannot retrain / rescan the slot. This also requires a reboot to clear the freeze and redetect the device in the slot. Issue the appropriate unfreeze and rescan commands on hotplug events, and don't oops on hotplug if pci_bus_to_OF_node() returns NULL. [bhelgaas: tidy comments]

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
unaffected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
360aebd85a4c946764f6301d68de2a817fad5159affectedgit6e7b5f922901585b8f11e0d6cda12bda5c59fc8aUnavailableNone listed
360aebd85a4c946764f6301d68de2a817fad5159affectedgit2ec8ec57bb8ebde3e2a015eff80e5d66e6634fe3UnavailableNone listed
360aebd85a4c946764f6301d68de2a817fad5159affectedgit473999ba937eac9776be791deed7c84a21d7880bUnavailableNone listed
360aebd85a4c946764f6301d68de2a817fad5159affectedgit6e7b24c71e530a6c1d656e73d8a30ee081656844UnavailableNone listed
360aebd85a4c946764f6301d68de2a817fad5159affectedgit48c6935a34981bb56f35be0774ec1f30c6e386f8UnavailableNone listed
360aebd85a4c946764f6301d68de2a817fad5159affectedgit1d2f63680c5719a5da92639e981c6c9a87fcee08UnavailableNone listed
360aebd85a4c946764f6301d68de2a817fad5159affectedgit78d20b8c13075eae3d884c21db7a09a6bbdda5b2UnavailableNone listed
360aebd85a4c946764f6301d68de2a817fad5159affectedgita2a2a6fc2469524caa713036297c542746d148dcUnavailableNone listed

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
affected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.9affectedUnavailableUnavailableUnavailableNone listed
0unaffectedsemver4.9UnavailableNone listed
5.10.241unaffectedsemverUnavailable5.10.*None listed
5.15.190unaffectedsemverUnavailable5.15.*None listed
6.1.148unaffectedsemverUnavailable6.1.*None listed
6.6.102unaffectedsemverUnavailable6.6.*None listed
6.12.42unaffectedsemverUnavailable6.12.*None listed
6.15.10unaffectedsemverUnavailable6.15.*None listed
6.16.1unaffectedsemverUnavailable6.16.*None listed
6.17unaffectedoriginal_commit_for_fixUnavailable*None listed