---
id: CVE-2025-38576
title: 'powerpc/eeh: Make EEH driver device hotplug safe'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  powerpc/eeh: Make EEH driver device hotplug safe

  Multiple race conditions existed between the PCIe hotplug driver and the
  EEH driver, leading to a variety of kernel oo…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1c2042c83aa7af10579b71a1fe5e22bbae69f08c <
    502f08831a9afb72dc98a56ae6504da43e93b250
  - >-
    Linux >= 1c2042c83aa7af10579b71a1fe5e22bbae69f08c <
    f56e004b781719d8fdf6c9619b15caf2579bc1f2
  - >-
    Linux >= 1c2042c83aa7af10579b71a1fe5e22bbae69f08c <
    59c6d3d81d42bf543c90597b4f38c53d6874c5a1
  - >-
    Linux >= 1c2042c83aa7af10579b71a1fe5e22bbae69f08c <
    a426e8a6ae161f51888585b065db0f8f93ab2e16
  - >-
    Linux >= 1c2042c83aa7af10579b71a1fe5e22bbae69f08c <
    d2c60a8a387e9fcc28447ef36c03f8e49fd052a6
  - >-
    Linux >= 1c2042c83aa7af10579b71a1fe5e22bbae69f08c <
    d42bbd8f30ac38b1ce54715bf08ec3dac18d6b25
  - >-
    Linux >= 1c2042c83aa7af10579b71a1fe5e22bbae69f08c <
    19d5036e7ad766cf212aebec23b9f1d7924a62bc
  - >-
    Linux >= 1c2042c83aa7af10579b71a1fe5e22bbae69f08c <
    1010b4c012b0d78dfb9d3132b49aa2ef024a07a7
  - Linux 3.14
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:04:16.262649Z'
published: '2025-08-19'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:12:47.738Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38576'
references:
  - url: 'https://git.kernel.org/stable/c/502f08831a9afb72dc98a56ae6504da43e93b250'
  - url: 'https://git.kernel.org/stable/c/f56e004b781719d8fdf6c9619b15caf2579bc1f2'
  - url: 'https://git.kernel.org/stable/c/59c6d3d81d42bf543c90597b4f38c53d6874c5a1'
  - url: 'https://git.kernel.org/stable/c/a426e8a6ae161f51888585b065db0f8f93ab2e16'
  - url: 'https://git.kernel.org/stable/c/d2c60a8a387e9fcc28447ef36c03f8e49fd052a6'
  - url: 'https://git.kernel.org/stable/c/d42bbd8f30ac38b1ce54715bf08ec3dac18d6b25'
  - url: 'https://git.kernel.org/stable/c/19d5036e7ad766cf212aebec23b9f1d7924a62bc'
  - url: 'https://git.kernel.org/stable/c/1010b4c012b0d78dfb9d3132b49aa2ef024a07a7'
tags:
  - cve.org
epss: 0.00171
epssPercentile: 0.06553
ingestedAt: '2026-11-05T22:38:31.995Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

powerpc/eeh: Make EEH driver device hotplug safe

Multiple race conditions existed between the PCIe hotplug driver and the
EEH driver, leading to a variety of kernel oopses of the same general
nature:

<pcie device unplug>
<eeh driver trigger>
<hotplug removal trigger>
<pcie tree reconfiguration>
<eeh recovery next step>
<oops in EEH driver bus iteration loop>

A second class of oops is also seen when the underlying bus disappears
during device recovery.

Refactor the EEH module to be PCI rescan and remove safe.  Also clean
up a few minor formatting / readability issues.

## Affected

- `Linux >= 1c2042c83aa7af10579b71a1fe5e22bbae69f08c < 502f08831a9afb72dc98a56ae6504da43e93b250`
- `Linux >= 1c2042c83aa7af10579b71a1fe5e22bbae69f08c < f56e004b781719d8fdf6c9619b15caf2579bc1f2`
- `Linux >= 1c2042c83aa7af10579b71a1fe5e22bbae69f08c < 59c6d3d81d42bf543c90597b4f38c53d6874c5a1`
- `Linux >= 1c2042c83aa7af10579b71a1fe5e22bbae69f08c < a426e8a6ae161f51888585b065db0f8f93ab2e16`
- `Linux >= 1c2042c83aa7af10579b71a1fe5e22bbae69f08c < d2c60a8a387e9fcc28447ef36c03f8e49fd052a6`
- `Linux >= 1c2042c83aa7af10579b71a1fe5e22bbae69f08c < d42bbd8f30ac38b1ce54715bf08ec3dac18d6b25`
- `Linux >= 1c2042c83aa7af10579b71a1fe5e22bbae69f08c < 19d5036e7ad766cf212aebec23b9f1d7924a62bc`
- `Linux >= 1c2042c83aa7af10579b71a1fe5e22bbae69f08c < 1010b4c012b0d78dfb9d3132b49aa2ef024a07a7`
- `Linux 3.14`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
