PT-2025-8994 · Linux+1 · Linux Kernel+1

Published

2025-01-26

·

Updated

2025-03-29

·

CVE-2025-21803

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A vulnerability in the Linux kernel has been resolved. The issue arises from the enable gpe wakeup() function calling acpi enable all wakeup gpes(), which may lead to a thread switch and cause the CPU to be in an interrupt-enabled state after the enable gpe wakeup() function returns. This results in warnings during S3 suspend. The root cause is the use of a mutex to protect acpi hw enable all wakeup gpes() and the potential for a thread switch caused by acpi ut acquire mutex(). The solution involves calling acpi hw enable all wakeup gpes() directly in enable gpe wakeup() to avoid concurrent execution during loongarch acpi suspend().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-12239
CVE-2025-21803
OESA-2025-1339
OESA-2025-1340

Affected Products

Astra Linux
Linux Kernel