CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2025-21849: drm/i915/gt: Use spin_lock_irqsave() in interruptible context

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/gt: Use spin_lock_irqsave() in interruptible context

spin_lock/unlock() functions used in interrupt contexts could
result in a deadlock, as seen in GitLab issue #13399,
which occurs when interrupt comes in while holding a lock.

Try to remedy the problem by saving irq state before spin lock
acquisition.

v2: add irqs' state save/restore calls to all locks/unlocks in
signal_irq_work() execution (Maciej)

v3: use with spin_lock_irqsave() in guc_lrc_desc_unpin() instead
of other lock/unlock calls and add Fixes and Cc tags (Tvrtko);
change title and commit message

(cherry picked from commit c088387ddd6482b40f21ccf23db1125e8fa4af7e)

Classification

CVE ID: CVE-2025-21849

Affected Products

Vendor: Linux, Linux

Product: Linux, Linux

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.02% (probability of being exploited)

EPSS Percentile: 1.61% (scored less or equal to compared to others)

EPSS Date: 2025-04-10 (when was this score calculated)

References

https://nvd.nist.gov/vuln/detail/CVE-2025-21849
https://git.kernel.org/stable/c/2bf1f4c129db7a10920655b000f0292f1ee509c2
https://git.kernel.org/stable/c/47ae46ac5407646420e06b78e0dad331e56a4bb4
https://git.kernel.org/stable/c/e49477f7f78598295551d486ecc7f020d796432e

Timeline