CVE-2025-38671

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains a flaw in the i2c subsystem’s qup component where the logic fails to exit a loop when a timeout occurs. This can occur if the i2c bus remains active due to a malfunctioning or malicious client, potentially leading to a kernel hang. This issue was observed during testing with a PCA953x GPIO extender.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.