CVE-2025-37847

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-37847
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in ivpu_ms_cleanup() Fix deadlock in ivpu_ms_cleanup() by preventing runtime resume after file_priv->ms_lock is acquired. During a failure in runtime resume, a cold boot is executed, which calls ivpu_ms_cleanup_all(). This function calls ivpu_ms_cleanup() that acquires file_priv->ms_lock and causes the deadlock.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/019634f27a16796eab749e8107dae32099945f29 Patch
https://git.kernel.org/stable/c/7d12a7d43c7bab9097ba466581d8db702e7908dc Patch
https://git.kernel.org/stable/c/9a6f56762d23a1f3af15e67901493c927caaf882 Patch
https://git.kernel.org/stable/c/f996ecc789b5dbaaf38b6ec0a1917821789cbd9c Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
History

17 Nov 2025, 12:54

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/019634f27a16796eab749e8107dae32099945f29 - () https://git.kernel.org/stable/c/019634f27a16796eab749e8107dae32099945f29 - Patch
References () https://git.kernel.org/stable/c/7d12a7d43c7bab9097ba466581d8db702e7908dc - () https://git.kernel.org/stable/c/7d12a7d43c7bab9097ba466581d8db702e7908dc - Patch
References () https://git.kernel.org/stable/c/9a6f56762d23a1f3af15e67901493c927caaf882 - () https://git.kernel.org/stable/c/9a6f56762d23a1f3af15e67901493c927caaf882 - Patch
References () https://git.kernel.org/stable/c/f996ecc789b5dbaaf38b6ec0a1917821789cbd9c - () https://git.kernel.org/stable/c/f996ecc789b5dbaaf38b6ec0a1917821789cbd9c - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CWE CWE-667

12 May 2025, 17:32

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: accel/ivpu: Se corrige el bloqueo en ivpu_ms_cleanup(). Se corrige el bloqueo en ivpu_ms_cleanup() impidiendo la reanudación en tiempo de ejecución tras adquirir file_priv->ms_lock. Durante un fallo en la reanudación en tiempo de ejecución, se ejecuta un arranque en frío que llama a ivpu_ms_cleanup_all(). Esta función llama a ivpu_ms_cleanup(), que adquiere file_priv->ms_lock y provoca el bloqueo.

09 May 2025, 07:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-09 07:16

Updated : 2025-11-17 12:54

NVD link : CVE-2025-37847

Mitre link : CVE-2025-37847

CVE.ORG link : CVE-2025-37847

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-667

Improper Locking