Listen to this Post
How the mentioned CVE works:
The vulnerability exists within the OP-TEE driver for the Linux kernel when using FF-A (Firmware Framework for Armv8-A). The driver registers a notification callback function, notif_callback(), which is designed to handle asynchronous notifications from secure world firmware. However, this callback is invoked directly from an interrupt context, which is inherently atomic. Within this atomic context, the callback function attempts to acquire a mutex lock via a call chain involving optee_get_msg_arg(). Mutex locks can cause the process to sleep if contested, which is strictly forbidden in atomic contexts where scheduling is disabled. This results in a kernel panic, observable as a “BUG: sleeping function called from invalid context” error, potentially leading to a system crash or instability.
Platform: Linux Kernel
Version: OP-TEE driver
Vulnerability : Sleep in Atomic
Severity: Medium
date: 2025-07-25
Prediction: 2025-08-15
What Undercode Say:
`dmesg | grep “BUG: sleeping function”`
`cat /proc/version`
`grep -r “notif_callback” /usr/src/linux-headers-$(uname -r)/`
How Exploit:
Kernel panic triggered by sending specific FF-A notifications, causing a Denial-of-Service (DoS) by crashing the system or making it unstable. No arbitrary code execution.
Protection from this CVE
Apply kernel patch from official Linux kernel git repository. Update to a kernel version containing the fix.
Impact:
System crash, kernel panic, Denial-of-Service (DoS).
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
