PT-2025-14332 · Linux+7 · Linux Kernel+7
Published
2025-01-08
·
Updated
2026-04-20
·
CVE-2025-21951
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A deadlock scenario can occur in the Linux kernel when the device is not alive during recovery work, causing the recovery work to stall while waiting for the device lock. This issue is observed on the X1E80100 CRD device during the PM shutdown() callback and can also occur on other paths, such as during the PM suspend() callback. The problem arises when the driver core holds the device lock before calling the driver's shutdown() or suspend() callback, and the recovery work is already started. To fix this issue, the pci try reset function() function is used in recovery work, which checks for the availability of the device lock before trying to reset the device.
Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for this problem.
As a temporary workaround, consider modifying the recovery work to use pci try reset function() to avoid deadlock.
Restrict access to the recovery work function to minimize the risk of exploitation.
Exploit
Fix
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu