CVE-2025-71158 PUBLISHED

gpio: mpsse: ensure worker is torn down

Assigner: Linux
Reserved: 13.01.2026 Published: 23.01.2026 Updated: 23.01.2026

In the Linux kernel, the following vulnerability has been resolved:

gpio: mpsse: ensure worker is torn down

When an IRQ worker is running, unplugging the device would cause a crash. The sealevel hardware this driver was written for was not hotpluggable, so I never realized it.

This change uses a spinlock to protect a list of workers, which it tears down on disconnect.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 472d900c8bcac301ae0e40fdca7db799bd989ff5 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 179ef1127d7a4f09f0e741fa9f30b8a8e7886271 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • unaffected from 6.18.6 to 6.18.* (incl.)
  • unaffected from 6.19-rc1 to * (incl.)

References