Linux Kernel Hisilicon SEC Softirq Mutex Lock Vulnerability

Vulnerability

A vulnerability in the Linux kernel's handling of softirq can lead to scheduling issues when the Kunpeng920 encryption driver is used. This driver, during packet decryption and encryption in softirq, improperly employs a mutex lock, causing the kernel to generate a scheduling error. The issue arises in the Hisilicon SEC crypto implementation, where the encryption process interferes with the normal interrupt handling, leading to potential performance degradation or missed network packets.

Impact

Exploitation of this vulnerability can cause the kernel to mismanage task scheduling, potentially leading to performance issues or disruptions in network packet processing.

Reproduction

The vulnerability can be reproduced by using the Kunpeng920 encryption driver to encrypt and decrypt packets during a softirq. This will cause the kernel to report a scheduling error, indicating that a mutex lock was improperly used while the system was handling interrupts.

Added: Jun 18, 2025, 2:56 PM
Updated: Jun 18, 2025, 2:56 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
0.0
relevance
0.2
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.