UnratedFix available
powerpc/eeh: Make EEH driver device hotplug safe
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: Make EEH driver device hotplug safe Multiple race conditions existed between the PCIe hotplug driver and the EEH driver, leading to a variety of kernel oopses of the same general nature: A second class of oops is also seen when the underlying bus disappears during device recovery. Refactor the EEH module to be PCI rescan and remove safe. Also clean up a few minor formatting / readability issues.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.241, 5.15.190, 6.1.148, 6.12.42, 6.15.10, 6.16.1, 6.6.102
- CVEs
- CVE-2025-38576
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 5 Nov 2026, 00:56 UTC · Revision 1
Source evidence
powerpc/eeh: Make EEH driver device hotplug safe
core-osv · Original sourcePublished 19 Aug 2025, 17:02 UTC
In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: Make EEH driver device hotplug safe Multiple race conditions existed between the PCIe hotplug driver and the EEH driver, leading to a variety of kernel oopses of the same general nature: A second class of oops is also seen when the underlying bus disappears during device recovery. Refactor the EEH module to be PCI rescan and remove safe. Also clean up a few minor formatting / readability issues.
osv:CVE-2025-38576
Kernel
Fixed versions: 5.10.241, 5.15.190, 6.1.148, 6.6.102, 6.12.42, 6.15.10, 6.16.1
Complete source record
{
"id": "99ae2cd982b6852e136acb2f17d6285b3952e77ba239a340ef8d6468a0f5b9ac",
"url": "https://osv.dev/vulnerability/CVE-2025-38576",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "powerpc/eeh: Make EEH driver device hotplug safe",
"summary": "In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: Make EEH driver device hotplug safe Multiple race conditions existed between the PCIe hotplug driver and the EEH driver, leading to a variety of kernel oopses of the same general nature: A second class of oops is also seen when the underlying bus disappears during device recovery. Refactor the EEH module to be PCI rescan and remove safe. Also clean up a few minor formatting / readability issues.",
"evidence": "osv:CVE-2025-38576",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.10.241",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.190",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.148",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.102",
"evidence": "/affected/1/ranges"
},
{
"value": "6.12.42",
"evidence": "/affected/1/ranges"
},
{
"value": "6.15.10",
"evidence": "/affected/1/ranges"
},
{
"value": "6.16.1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2025-38576",
"aliases": [
"CVE-2025-38576"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "1c2042c83aa7af10579b71a1fe5e22bbae69f08c"
},
{
"fixed": "502f08831a9afb72dc98a56ae6504da43e93b250"
},
{
"fixed": "f56e004b781719d8fdf6c9619b15caf2579bc1f2"
},
{
"fixed": "59c6d3d81d42bf543c90597b4f38c53d6874c5a1"
},
{
"fixed": "a426e8a6ae161f51888585b065db0f8f93ab2e16"
},
{
"fixed": "d2c60a8a387e9fcc28447ef36c03f8e49fd052a6"
},
{
"fixed": "d42bbd8f30ac38b1ce54715bf08ec3dac18d6b25"
},
{
"fixed": "19d5036e7ad766cf212aebec23b9f1d7924a62bc"
},
{
"fixed": "1010b4c012b0d78dfb9d3132b49aa2ef024a07a7"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38576.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.14.0"
},
{
"fixed": "5.10.241"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.190"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.148"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.102"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.42"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.15.10"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.16.0"
},
{
"fixed": "6.16.1"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38576.json"
}
}
],
"modified": "2026-10-28T02:30:41.480089310Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/1010b4c012b0d78dfb9d3132b49aa2ef024a07a7",
"https://git.kernel.org/stable/c/19d5036e7ad766cf212aebec23b9f1d7924a62bc",
"https://git.kernel.org/stable/c/502f08831a9afb72dc98a56ae6504da43e93b250",
"https://git.kernel.org/stable/c/59c6d3d81d42bf543c90597b4f38c53d6874c5a1",
"https://git.kernel.org/stable/c/a426e8a6ae161f51888585b065db0f8f93ab2e16",
"https://git.kernel.org/stable/c/d2c60a8a387e9fcc28447ef36c03f8e49fd052a6",
"https://git.kernel.org/stable/c/d42bbd8f30ac38b1ce54715bf08ec3dac18d6b25",
"https://git.kernel.org/stable/c/f56e004b781719d8fdf6c9619b15caf2579bc1f2",
"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38576.json",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38576",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38576.json"
}
},
"related_cves": [
{
"value": "CVE-2025-38576",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 508791,
"published_at": "2025-08-19T17:02:59.623+00:00"
}