CVE-2025-37968

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock issue in the Linux kernel has been identified, specifically in the iio: light: opt3001 driver. The threaded IRQ function is prone to a deadlock due to concurrent flag access. This occurs when the flag is read twice, once to lock a mutex and once to unlock it, potentially resulting in the mutex not being unlocked. The issue arises from subtle cases where the flag could be true at the mutex lock stage and false at the mutex unlock stage.

Recommendations To resolve this issue, the opt3001 irq() code should be made more robust by reading the flag into a variable and using the variable value at both stages. At the moment, there is no information about a newer version that contains a fix for this vulnerability.