CVE-2025-21821

一、漏洞信息
 漏洞编号：[CVE-2025-21821](https://nvd.nist.gov/vuln/detail/CVE-2025-21821)
 漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)
 漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.19,6.1.8,6.4.0,6.6.0
 CVSS V3.0分值：
  BaseScore：N/A None
  Vector：CVSS：3.0/
 漏洞简述：
  In the Linux kernel, the following vulnerability has been resolved:fbdev: omap: use threaded IRQ for LCD DMAWhen using touchscreen and framebuffer, Nokia 770 crashes easily with:    BUG: scheduling while atomic: irq/144-ads7846/82/0x00010000    Modules linked in: usb_f_ecm g_ether usb_f_rndis u_ether libcomposite configfs omap_udc ohci_omap ohci_hcd    CPU: 0 UID: 0 PID: 82 Comm: irq/144-ads7846 Not tainted 6.12.7-770 #2    Hardware name: Nokia 770    Call trace:     unwind_backtrace from show_stack+0x10/0x14     show_stack from dump_stack_lvl+0x54/0x5c     dump_stack_lvl from __schedule_bug+0x50/0x70     __schedule_bug from __schedule+0x4d4/0x5bc     __schedule from schedule+0x34/0xa0     schedule from schedule_preempt_disabled+0xc/0x10     schedule_preempt_disabled from __mutex_lock.constprop.0+0x218/0x3b4     __mutex_lock.constprop.0 from clk_prepare_lock+0x38/0xe4     clk_prepare_lock from clk_set_rate+0x18/0x154     clk_set_rate from sossi_read_data+0x4c/0x168     sossi_read_data from hwa742_read_reg+0x5c/0x8c     hwa742_read_reg from send_frame_handler+0xfc/0x300     send_frame_handler from process_pending_requests+0x74/0xd0     process_pending_requests from lcd_dma_irq_handler+0x50/0x74     lcd_dma_irq_handler from __handle_irq_event_percpu+0x44/0x130     __handle_irq_event_percpu from handle_irq_event+0x28/0x68     handle_irq_event from handle_level_irq+0x9c/0x170     handle_level_irq from generic_handle_domain_irq+0x2c/0x3c     generic_handle_domain_irq from omap1_handle_irq+0x40/0x8c     omap1_handle_irq from generic_handle_arch_irq+0x28/0x3c     generic_handle_arch_irq from call_with_stack+0x1c/0x24     call_with_stack from __irq_svc+0x94/0xa8    Exception stack(0xc5255da0 to 0xc5255de8)    5da0: 00000001 c22fc620 00000000 00000000 c08384a8 c106fc00 00000000 c240c248    5dc0: c113a600 c3f6ec30 00000001 00000000 c22fc620 c5255df0 c22fc620 c0279a94    5de0: 60000013 ffffffff     __irq_svc from clk_prepare_lock+0x4c/0xe4     clk_prepare_lock from clk_get_rate+0x10/0x74     clk_get_rate from uwire_setup_transfer+0x40/0x180     uwire_setup_transfer from spi_bitbang_transfer_one+0x2c/0x9c     spi_bitbang_transfer_one from spi_transfer_one_message+0x2d0/0x664     spi_transfer_one_message from __spi_pump_transfer_message+0x29c/0x498     __spi_pump_transfer_message from __spi_sync+0x1f8/0x2e8     __spi_sync from spi_sync+0x24/0x40     spi_sync from ads7846_halfd_read_state+0x5c/0x1c0     ads7846_halfd_read_state from ads7846_irq+0x58/0x348     ads7846_irq from irq_thread_fn+0x1c/0x78     irq_thread_fn from irq_thread+0x120/0x228     irq_thread from kthread+0xc8/0xe8     kthread from ret_from_fork+0x14/0x28As a quick fix, switch to a threaded IRQ which provides a stable system.
 漏洞公开时间：2025-02-28 04:16:04
 漏洞创建时间：2025-02-28 10:22:00
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2025-21821
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7bbbd311dd503653a2cc86d9226740883051dc92 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/8392ea100f0b86c234c739c6662f39f0ccc0cefd |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/aa8e22cbedeb626f2a6bda0aea362353d627cd0a |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/e4b6b665df815b4841e71b72f06446884e8aad40 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/fb6a5edb60921887d7d10619fcdcbee9759552cb |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-21821 | https://bugzilla.suse.com/show_bug.cgi?id=1239174 |
| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2025-21821 | https://bugzilla.suse.com/show_bug.cgi?id=1239174 |
| suse_bugzilla | https://git.kernel.org/stable/c/7bbbd311dd503653a2cc86d9226740883051dc92 | https://bugzilla.suse.com/show_bug.cgi?id=1239174 |
| suse_bugzilla | https://git.kernel.org/stable/c/8392ea100f0b86c234c739c6662f39f0ccc0cefd | https://bugzilla.suse.com/show_bug.cgi?id=1239174 |
| suse_bugzilla | https://git.kernel.org/stable/c/aa8e22cbedeb626f2a6bda0aea362353d627cd0a | https://bugzilla.suse.com/show_bug.cgi?id=1239174 |
| suse_bugzilla | https://git.kernel.org/stable/c/e4b6b665df815b4841e71b72f06446884e8aad40 | https://bugzilla.suse.com/show_bug.cgi?id=1239174 |
| suse_bugzilla | https://git.kernel.org/stable/c/fb6a5edb60921887d7d10619fcdcbee9759552cb | https://bugzilla.suse.com/show_bug.cgi?id=1239174 |
| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2025/CVE-2025-21821.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1239174 |
| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2348903 | https://bugzilla.suse.com/show_bug.cgi?id=1239174 |
| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2025022707-CVE-2025-21821-ae41@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2348903 |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
| linux_kernel | 6.1.129 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=7bbbd311dd503653a2cc86d9226740883051dc92Fixed |  | linuxkernelcves |
| linux_kernel | 6.6.79 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=fb6a5edb60921887d7d10619fcdcbee9759552cbFixed |  | linuxkernelcves |
| linux_kernel | 6.12.16 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=aa8e22cbedeb626f2a6bda0aea362353d627cd0aFixed |  | linuxkernelcves |
| linux_kernel | 6.13.4 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=8392ea100f0b86c234c739c6662f39f0ccc0cefdFixed |  | linuxkernelcves |
| linux_kernel | 6.14-rc1 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=e4b6b665df815b4841e71b72f06446884e8aad40Please |  | linuxkernelcves |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
  In the Linux kernel, the following vulnerability has been resolved:fbdev: omap: use threaded IRQ for LCD DMAWhen using touchscreen and framebuffer, Nokia 770 crashes easily with:    BUG: scheduling while atomic: irq/144-ads7846/82/0x00010000    Modules linked in: usb_f_ecm g_ether usb_f_rndis u_ether libcomposite configfs omap_udc ohci_omap ohci_hcd    CPU: 0 UID: 0 PID: 82 Comm: irq/144-ads7846 Not tainted 6.12.7-770 #2    Hardware name: Nokia 770    Call trace:     unwind_backtrace from show_stack+0x10/0x14     show_stack from dump_stack_lvl+0x54/0x5c     dump_stack_lvl from __schedule_bug+0x50/0x70     __schedule_bug from __schedule+0x4d4/0x5bc     __schedule from schedule+0x34/0xa0     schedule from schedule_preempt_disabled+0xc/0x10     schedule_preempt_disabled from __mutex_lock.constprop.0+0x218/0x3b4     __mutex_lock.constprop.0 from clk_prepare_lock+0x38/0xe4     clk_prepare_lock from clk_set_rate+0x18/0x154     clk_set_rate from sossi_read_data+0x4c/0x168     sossi_read_data from hwa742_read_reg+0x5c/0x8c     hwa742_read_reg from send_frame_handler+0xfc/0x300     send_frame_handler from process_pending_requests+0x74/0xd0     process_pending_requests from lcd_dma_irq_handler+0x50/0x74     lcd_dma_irq_handler from __handle_irq_event_percpu+0x44/0x130     __handle_irq_event_percpu from handle_irq_event+0x28/0x68     handle_irq_event from handle_level_irq+0x9c/0x170     handle_level_irq from generic_handle_domain_irq+0x2c/0x3c     generic_handle_domain_irq from omap1_handle_irq+0x40/0x8c     omap1_handle_irq from generic_handle_arch_irq+0x28/0x3c     generic_handle_arch_irq from call_with_stack+0x1c/0x24     call_with_stack from __irq_svc+0x94/0xa8    Exception stack(0xc5255da0 to 0xc5255de8)    5da0: 00000001 c22fc620 00000000 00000000 c08384a8 c106fc00 00000000 c240c248    5dc0: c113a600 c3f6ec30 00000001 00000000 c22fc620 c5255df0 c22fc620 c0279a94    5de0: 60000013 ffffffff     __irq_svc from clk_prepare_lock+0x4c/0xe4     clk_prepare_lock from clk_get_rate+0x10/0x74     clk_get_rate from uwire_setup_transfer+0x40/0x180     uwire_setup_transfer from spi_bitbang_transfer_one+0x2c/0x9c     spi_bitbang_transfer_one from spi_transfer_one_message+0x2d0/0x664     spi_transfer_one_message from __spi_pump_transfer_message+0x29c/0x498     __spi_pump_transfer_message from __spi_sync+0x1f8/0x2e8     __spi_sync from spi_sync+0x24/0x40     spi_sync from ads7846_halfd_read_state+0x5c/0x1c0     ads7846_halfd_read_state from ads7846_irq+0x58/0x348     ads7846_irq from irq_thread_fn+0x1c/0x78     irq_thread_fn from irq_thread+0x120/0x228     irq_thread from kthread+0xc8/0xe8     kthread from ret_from_fork+0x14/0x28As a quick fix, switch to a threaded IRQ which provides a stable system.
 openEuler评分：
  5.5
 Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
 受影响版本排查(受影响/不受影响)：
  1.openEuler-20.03-LTS-SP4(4.19.90):受影响
2.openEuler-22.03-LTS-SP3(5.10.0):受影响
3.openEuler-22.03-LTS-SP4(5.10.0):受影响
4.openEuler-24.03-LTS(6.6.0):受影响
5.openEuler-24.03-LTS-SP1(6.6.0):受影响
6.openEuler-24.03-LTS-SP2(6.6.0):受影响
7.master(6.6.0):不受影响
8.openEuler-24.03-LTS-Next(6.6.0):不受影响

修复是否涉及abi变化(是/否)：
  1.openEuler-20.03-LTS-SP4(4.19.90):否
2.openEuler-22.03-LTS-SP3(5.10.0):否
3.master(6.6.0):否
4.openEuler-24.03-LTS(6.6.0):否
5.openEuler-24.03-LTS-Next(6.6.0):否
6.openEuler-22.03-LTS-SP4(5.10.0):否
7.openEuler-24.03-LTS-SP1(6.6.0):否
8.openEuler-24.03-LTS-SP2(6.6.0):否

原因说明：
  1.openEuler-24.03-LTS(6.6.0):正常修复
2.openEuler-24.03-LTS-SP1(6.6.0):正常修复
3.openEuler-24.03-LTS-SP2(6.6.0):正常修复
4.openEuler-20.03-LTS-SP4(4.19.90):不修复-超出修复范围
5.openEuler-22.03-LTS-SP3(5.10.0):不修复-超出修复范围
6.openEuler-22.03-LTS-SP4(5.10.0):不修复-超出修复范围
7.master(6.6.0):不受影响-漏洞代码不能被攻击者触发
8.openEuler-24.03-LTS-Next(6.6.0):不受影响-漏洞代码不能被攻击者触发

src-openEuler/kernel

内容风险标识

评论 (11)

src-openEuler/kernel .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2025-21821

评论 (11)

搜索帮助

src-openEuler/kernel