CVE-2025-37847

accel/ivpu: Fix deadlock in ivpu_ms_cleanup()

MEDIUM
5.5
CVSS Score
Published: May 9, 2025 at 06:41 AM UTC
Updated: June 17, 2026 at 09:15 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in ivpu_ms_cleanup() Fix deadlock in ivpu_ms_cleanup() by preventing runtime resume after file_priv->ms_lock is acquired. During a failure in runtime resume, a cold boot is executed, which calls ivpu_ms_cleanup_all(). This function calls ivpu_ms_cleanup() that acquires file_priv->ms_lock and causes the deadlock.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.11 ≤ v < 6.12.246.11 ≤ v < 6.13.126.11 ≤ v < 6.14.36.11 ≤ v < 6.156.13 ≤ v < 6.13.126.14 ≤ v < 6.14.36.116.15 rc1cdfad4db7756563db7d458216d9e3c2651dddc7d
Vendor states this is fixed in 019634f27a16796eab749e8107dae32099945f29 (fixed)
Vendor states this is fixed in 7d12a7d43c7bab9097ba466581d8db702e7908dc (fixed)
Vendor states this is fixed in 9a6f56762d23a1f3af15e67901493c927caaf882 (fixed)
Vendor states this is fixed in f996ecc789b5dbaaf38b6ec0a1917821789cbd9c (fixed)
Vendor states this is fixed in 6.11 (unaffected)
Vendor states this is fixed in 6.12.24 (unaffected)
Vendor states this is fixed in 6.13.12 (unaffected)
Vendor states this is fixed in 6.14.3 (unaffected)
Vendor states this is fixed in 6.15 (unaffected)

References (4)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/019634f27a16796eab749e8107dae32099945f29
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7d12a7d43c7bab9097ba466581d8db702e7908dc
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/9a6f56762d23a1f3af15e67901493c927caaf882
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f996ecc789b5dbaaf38b6ec0a1917821789cbd9c

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-667

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card