CVE-2025-38388: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability in the Linux kernel's firmware arm_ffa component was discovered and disclosed on July 25, 2025. The issue involves the use of a mutex to protect notifier hashtable accesses which can lead to issues in atomic context (NVD).

The vulnerability stems from using a mutex for protecting notifier hashtable accesses, which can cause kernel warnings due to sleeping in atomic context. The issue manifests with specific warnings at kernel/locking/mutex.c:258, showing problems with atomic operations and interrupt handling. The technical trace includes multiple function calls through the kernel stack, including showstack, dumpstack, and mutex_lock operations (NVD).

The vulnerability can result in kernel warnings and potential system stability issues when the mutex lock is called in atomic context. This can lead to unexpected system behavior and potential reliability concerns in affected Linux kernel versions (NVD).

The vulnerability has been addressed by replacing the mutex with an rwlock to protect the notifier hashtable accesses. This solution ensures that read-side locking does not sleep and multiple readers can acquire the lock concurrently, while maintaining exclusive writer access. The change resolves the lockdep warnings about potential sleep in atomic context (NVD).