Threats tagged 'ghsa-53c5-74px-fwch'

CVE-2025-23151 is a race condition vulnerability in the Linux kernel's MHI host driver. It occurs when a client driver calls mhi_unprepare_from_transfer() to stop incoming data while simultaneously processing data that triggers mhi_queue_buf(), which calls mhi_gen_tre(). If mhi_gen_tre() executes after the channel has been torn down, it causes a kernel panic due to an invalid memory dereference. The issue is fixed by adding a check in mhi_gen_tre() to verify the channel state before accessing it.