CVE-2025-38040

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

serial: mctrl_gpio: split disable_ms into sync and no_sync APIs

The following splat has been observed on a SAMA5D27 platform using

atmel_serial:

BUG: sleeping function called from invalid context at kernel/irq/manage.c:738

in_atomic(): 1, irqs_disabled(): 128, non_block: 0, pid: 27, name: kworker/u5:0

preempt_count: 1, expected: 0

INFO: lockdep is turned off.

irq event stamp: 0

hardirqs last enabled at (0): [<00000000>] 0x0

hardirqs last disabled at (0): [<c01588f0>] copy_process+0x1c4c/0x7bec

softirqs last enabled at (0): [<c0158944>] copy_process+0x1ca0/0x7bec

softirqs last disabled at (0): [<00000000>] 0x0

CPU: 0 UID: 0 PID: 27 Comm: kworker/u5:0 Not tainted 6.13.0-rc7+ #74

Hardware name: Atmel SAMA5

Workqueue: hci0 hci_power_on [bluetooth]

Call trace:

unwind_backtrace from show_stack+0x18/0x1c

show_stack from dump_stack_lvl+0x44/0x70

dump_stack_lvl from __might_resched+0x38c/0x598

__might_resched from

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References