CVE-2025-38576

What it actually does

Race conditions between the PCIe hotplug driver and the EEH driver allow kernel oopses during bus iteration or when the underlying bus disappears during device recovery on PowerPC systems.

Why it matters to the business

Systems may experience unexpected crashes or instability during hardware reconfiguration or error recovery events, increasing downtime risk especially in environments with frequent device changes; prevalence in Linux kernel deployments heightens exposure for affected distributions.

How an attack unfolds

An attacker with local access triggers rapid PCIe device unplug and hotplug events timed with EEH recovery steps, causing the driver to operate on stale or removed bus structures and resulting in kernel crashes.

How to fix it

Update the Linux kernel to a version containing commit 502f08831a9afb72dc98a56ae6504da43e93b250 or later; for Chainguard packages upgrade openjdk-11-openj9 and related variants to 0.53.0-r0 or newer.

How to confirm the fix worked

Verify kernel version includes the referenced commit; attempt controlled hotplug and EEH recovery sequences in a test environment while monitoring for oopses; review dmesg for absence of prior race-related crashes.

Typical attack path

1. Gain local access on affected PowerPC Linux system
2. Trigger PCIe device removal via hotplug interface
3. Induce EEH error condition to start recovery sequence
4. Perform additional hotplug or rescan operations during recovery
5. Trigger kernel oops in EEH bus iteration or missing bus handling

How to detect it

Search kernel logs (dmesg, /var/log/kern.log) for oops traces mentioning EEH driver bus iteration, hotplug removal triggers, or pcie tree reconfiguration around the time of device changes.

What your security team should do

• Apply kernel updates immediately on PowerPC systems using EEH and hotplug
• Test hotplug and error recovery paths after patching
• Monitor for kernel stability issues during device changes
• Review system logs for historical EEH-related oopses to assess prior exposure