CVE-2025-21849Improper Locking in Linux

CWE-667Improper Locking12 documents7 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 94.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMar 12
Latest updateMay 28

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Use spin_lock_irqsave() in interruptible context spin_lock/unlock() functions used in interrupt contexts could result in a deadlock, as seen in GitLab issue #13399, which occurs when interrupt comes in while holding a lock. Try to remedy the problem by saving irq state before spin lock acquisition. v2: add irqs' state save/restore calls to all locks/unlocks in signal_irq_work() execution (Maciej) v3: use with s

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages5 packages

NVDlinux/linux_kernel6.96.12.17+2
Debianlinux/linux_kernel< 6.12.17-1+1
CVEListV5linux/linux2f2cc53b5fe7022f3ae602eb24573d52f87409592bf1f4c129db7a10920655b000f0292f1ee509c2+3
debiandebian/linux< linux 6.12.17-1 (forky)
gitlabgitlab/gitlab

Patches

🔴Vulnerability Details

5
OSV
linux-lowlatency, linux-lowlatency-hwe-6.11, linux-oracle vulnerabilities2025-05-28
OSV
linux-aws vulnerabilities2025-05-22
OSV
linux, linux-azure, linux-azure-6.11, linux-gcp, linux-gcp-6.11, linux-hwe-6.11, linux-oem-6.11, linux-raspi, linux-realtime vulnerabilities2025-05-20
OSV
CVE-2025-21849: In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Use spin_lock_irqsave() in interruptible context spin_lock/unlock() f2025-03-12
GHSA
GHSA-g8v7-wpgp-c9xw: In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Use spin_lock_irqsave() in interruptible context spin_lock/unlock()2025-03-12

📋Vendor Advisories

6
Ubuntu
Linux kernel vulnerabilities2025-05-28
Ubuntu
Linux kernel (AWS) vulnerabilities2025-05-22
Ubuntu
Linux kernel vulnerabilities2025-05-20
GitLab
CVE-2025-21849: In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Use spin_lock_irqsave() in interruptible context spin_lock/unlock()2025-03-12
Red Hat
kernel: drm/i915/gt: Use spin_lock_irqsave() in interruptible context2025-03-12
CVE-2025-21849 — Improper Locking in Linux | cvebase