Threats tagged 'ghsa-q3v6-chw5-g495'

CVE-2025-23161 addresses a vulnerability in the Linux kernel's PCI subsystem where the vmd_dev::cfg_lock was incorrectly typed as a sleeping spinlock (spinlock_t) instead of a raw spinlock (raw_spinlock_t). This caused a bug when the lock was acquired with interrupts disabled in a PREEMPT_RT context, leading to a sleeping function being called from an invalid context and potentially causing a kernel crash or denial of service.