What’s Vulnerable › Vulnerabilities

CVE-2025-37847: accel/ivpu: Fix deadlock in ivpu_ms_cleanup()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-09 · updated 2026-06-17
• Weakness: CWE-667

Description

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in ivpu_ms_cleanup() Fix deadlock in ivpu_ms_cleanup() by preventing runtime resume after file_priv->ms_lock is acquired. During a failure in runtime resume, a cold boot is executed, which calls ivpu_ms_cleanup_all(). This function calls ivpu_ms_cleanup() that acquires file_priv->ms_lock and causes the deadlock.

Affected products

• Linux kernel: from 6.11 before 6.12.24; from 6.13 before 6.13.12; from 6.14 before 6.14.3; 6.15-rc1 — fixed in 6.12.24, 6.13.12, 6.14.3

How to fix

Upgrade to a fixed version: Linux kernel 6.12.24, 6.13.12, 6.14.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/019634f27a16796eab749e8107dae32099945f29
• https://git.kernel.org/stable/c/7d12a7d43c7bab9097ba466581d8db702e7908dc
• https://git.kernel.org/stable/c/9a6f56762d23a1f3af15e67901493c927caaf882
• https://git.kernel.org/stable/c/f996ecc789b5dbaaf38b6ec0a1917821789cbd9c

Get alerted when CVE-2025-37847 or the next vulnerability affects your stack