CVE-2025-21821
kernel: fbdev: omap: use threaded IRQ for LCD DMA
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 27, 2025
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's OMAP framebuffer driver. An interrupt handler in the LCD direct memory access (DMA) component improperly executes blocking operations while running in an atomic context. A local user could trigger this flaw during concurrent display and input device operations, causing a kernel crash and resulting in a Denial of Service (DoS).
Statement
This vulnerability is rated with a Low severity impact by Red Hat because exploitation is restricted to local environments on specialized OMAP-based hardware and results solely in a denial of service without compromising confidentiality or integrity. Standard enterprise Red Hat deployments run on generic server architectures and do not utilize or activate legacy OMAP display controllers by default. Triggering the condition requires local unprivileged or physical interaction on systems equipped with the relevant embedded display and touchscreen components, significantly limiting real-world exposure.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-663 · Use of a Non-reentrant Function in a Concurrent Context