CVE-2025-21645
19.01.2025, 11:15
In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it Wakeup for IRQ1 should be disabled only in cases where i8042 had actually enabled it, otherwise "wake_depth" for this IRQ will try to drop below zero and there will be an unpleasant WARN() logged: kernel: atkbd serio0: Disabling IRQ1 wakeup source to avoid platform firmware bug kernel: ------------[ cut here ]------------ kernel: Unbalanced IRQ 1 wake disable kernel: WARNING: CPU: 10 PID: 6431 at kernel/irq/manage.c:920 irq_set_irq_wake+0x147/0x1a0 The PMC driver uses DEFINE_SIMPLE_DEV_PM_OPS() to define its dev_pm_ops which sets amd_pmc_suspend_handler() to the .suspend, .freeze, and .poweroff handlers. i8042_pm_suspend(), however, is only set as the .suspend handler. Fix the issue by call PMC suspend handler only from the same set of dev_pm_ops handlers as i8042_pm_suspend(), which currently means just the .suspend handler. To reproduce this issue try hibernating (S4) the machine after a fresh boot without putting it into s2idle first. [ij: edited the commit message.]Enginsight
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 5.15.95 ≤ 𝑥 < 5.16 |
| linux | linux_kernel | 6.1.11 ≤ 𝑥 < 6.1.140 |
| linux | linux_kernel | 6.2.1 ≤ 𝑥 < 6.6.72 |
| linux | linux_kernel | 6.7 ≤ 𝑥 < 6.12.10 |
| linux | linux_kernel | 6.2 |
| linux | linux_kernel | 6.2:rc6 |
| linux | linux_kernel | 6.2:rc7 |
| linux | linux_kernel | 6.2:rc8 |
| linux | linux_kernel | 6.13:rc1 |
| linux | linux_kernel | 6.13:rc2 |
| linux | linux_kernel | 6.13:rc3 |
| linux | linux_kernel | 6.13:rc4 |
| linux | linux_kernel | 6.13:rc5 |
| linux | linux_kernel | 6.13:rc6 |
𝑥
= Vulnerable software versions
Debian Releases
References