CVE-2025-37848

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-37848
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix PM related deadlocks in MS IOCTLs Prevent runtime resume/suspend while MS IOCTLs are in progress. Failed suspend will call ivpu_ms_cleanup() that would try to acquire file_priv->ms_lock, which is already held by the IOCTLs.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/84547128526441b45c3c241419dececf20c30104 Patch
https://git.kernel.org/stable/c/afada73000bef7c79a22f0d7e93fac414eeff19e Patch
https://git.kernel.org/stable/c/c3d9fc2f2746b52e9f820a13c53b4418bec04b48 Patch
https://git.kernel.org/stable/c/d893da85e06edf54737bb80648bb58ba8fd56d9f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
History

17 Nov 2025, 12:54

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-667
References () https://git.kernel.org/stable/c/84547128526441b45c3c241419dececf20c30104 - () https://git.kernel.org/stable/c/84547128526441b45c3c241419dececf20c30104 - Patch
References () https://git.kernel.org/stable/c/afada73000bef7c79a22f0d7e93fac414eeff19e - () https://git.kernel.org/stable/c/afada73000bef7c79a22f0d7e93fac414eeff19e - Patch
References () https://git.kernel.org/stable/c/c3d9fc2f2746b52e9f820a13c53b4418bec04b48 - () https://git.kernel.org/stable/c/c3d9fc2f2746b52e9f820a13c53b4418bec04b48 - Patch
References () https://git.kernel.org/stable/c/d893da85e06edf54737bb80648bb58ba8fd56d9f - () https://git.kernel.org/stable/c/d893da85e06edf54737bb80648bb58ba8fd56d9f - Patch

12 May 2025, 17:32

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: accel/ivpu: Se corrigen los interbloqueos relacionados con el mantenimiento preventivo en las IOCTL de MS. Se impide la reanudación/suspensión en tiempo de ejecución mientras las IOCTL de MS están en curso. Una suspensión fallida llamará a ivpu_ms_cleanup(), que intentará adquirir file_priv->ms_lock, que ya está en poder de las IOCTL.

09 May 2025, 07:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-09 07:16

Updated : 2025-11-17 12:54

NVD link : CVE-2025-37848

Mitre link : CVE-2025-37848

CVE.ORG link : CVE-2025-37848

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-667

Improper Locking