PT-2025-18426 · Linux+4 · Linux Kernel+4

Published

2025-03-03

·

Updated

2026-04-20

·

CVE-2025-37745

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A deadlock vulnerability has been identified in the Linux kernel, specifically in the hibernate compressor param set() function. This issue arises when attempting to acquire the system transition mutex under param lock, resulting in a deadlock. The conflict occurs between the write operation to "/sys/module/hibernate/parameters/compressor" and the registration of the ieee80211 device. To resolve this, the hibernate compressor param set() function has been modified to use mutex trylock() for attempting to acquire system transition mutex, returning -EBUSY when it fails.
Recommendations To avoid this deadlock, consider applying the patch that changes hibernate compressor param set() to use mutex trylock() for attempting to acquire system transition mutex and return -EBUSY when it fails. As a temporary workaround, consider disabling the hibernate compressor param set() function until a patch is available. Restrict access to the /sys/module/hibernate/parameters/compressor module to minimize the risk of exploitation.

Exploit

Fix

Improper Locking

Weakness Enumeration

CWE-833CWE-667

Related Identifiers

AZL-62690
AZL-69671
BDU:2026-01400
CVE-2025-37745
ECHO-A635-F822-2E83
USN-7594-1
USN-7594-2
USN-7594-3
USN-8028-1
USN-8028-2
USN-8028-3
USN-8028-4
USN-8028-5
USN-8028-6
USN-8028-7
USN-8028-8
USN-8031-1
USN-8031-2
USN-8031-3
USN-8052-1
USN-8052-2
USN-8074-1
USN-8074-2
USN-8126-1

Affected Products

Astra Linux
Debian
Linuxmint
Linux Kernel
Ubuntu