PT-2025-4326 · Linux+6 · Linux Kernel+6
Published
2025-01-07
·
Updated
2026-03-13
·
CVE-2025-21645
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the disabling of IRQ1 wakeup in the Linux kernel. The problem occurs when the
i8042 driver enables IRQ1 wakeup, but the PMC driver disables it without checking if i8042 had actually enabled it. This can cause the wake depth for this IRQ to drop below zero, resulting in an unpleasant WARN() logged. The PMC driver uses DEFINE SIMPLE DEV PM OPS() to define its dev pm ops, which sets amd pmc suspend handler() to the .suspend, .freeze, and .poweroff handlers. However, i8042 pm suspend() is only set as the .suspend handler. To fix the issue, the PMC suspend handler should only be called from the same set of dev pm ops handlers as i8042 pm suspend(), which currently means just the .suspend handler.Recommendations
To resolve the issue, update to a newer version of the Linux kernel, such as version 6.6.74, which fixes bugs and vulnerabilities, including this one.
At the moment, there is no information about other specific versions that contain a fix for this vulnerability.
Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu