CVE-2025-21645
Published: Jan 19, 2025
Modified: May 23, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it Wakeup for IRQ1 should be disabled only in cases where i8042 had actually enabled it, otherwise "wake_depth" for this IRQ will try to drop below zero and there will be an unpleasant WARN() logged: kernel: atkbd serio0: Disabling IRQ1 wakeup source to avoid platform firmware bug kernel: ------------[ cut here ]------------ kernel: Unbalanced IRQ 1 wake disable kernel: WARNING: CPU: 10 PID: 6431 at kernel/irq/manage.c:920 irq_set_irq_wake+0x147/0x1a0 The PMC driver uses DEFINE_SIMPLE_DEV_PM_OPS() to define its dev_pm_ops which sets amd_pmc_suspend_handler() to the .suspend, .freeze, and .poweroff handlers. i8042_pm_suspend(), however, is only set as the .suspend handler. Fix the issue by call PMC suspend handler only from the same set of dev_pm_ops handlers as i8042_pm_suspend(), which currently means just the .suspend handler. To reproduce this issue try hibernating (S4) the machine after a fresh boot without putting it into s2idle first. [ij: edited the commit message.]
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 72e5a83b7c8401856cc3732150af24e43726717a - < ab47d72b736e78d3c2370b26e0bfc46eb0918391affected 8e60615e8932167057b363c11a7835da7f007106 - < 5cc621085e2b7a9b1905a98f8e5a86bb4aea2016affected 8e60615e8932167057b363c11a7835da7f007106 - < b25778c87a6bce40c31e92364f08aa6240309e25affected 8e60615e8932167057b363c11a7835da7f007106 - < dd410d784402c5775f66faf8b624e85e41c38aafaffected 3fc9dc0340e0b5df8059313537b55f82c1e84e94+2 more versions |
Linux | Linux | affected 6.2unaffected 0 - < 6.2unaffected 6.1.140 - <= 6.1.*unaffected 6.6.72 - <= 6.6.*unaffected 6.12.10 - <= 6.12.*+1 more versions |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now