Vulnerability in Linux
CVE-2025-37847
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in ivpu_ms_cleanup() Fix deadlock in ivpu_ms_cleanup() by preventing runtime resume after file_priv->ms_lock is acquired. During a failure in runtime resume, a cold boot is executed, which calls ivpu_ms_cleanup_all(). This function calls ivpu_ms_cleanup() that acquires file_priv->ms_lock and causes the deadlock.
EPSS: 0.002 (7.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions cdfad4db7756563db7d458216d9e3c2651dddc7d, 6.11, 0
- Linux Linux_kernel — versions 6.15
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-37847?
- CVE-2025-37847 is a medium-severity vulnerability in Linux, classified under Improper Locking. CVSS score: 5.5/10. Published 2025-05-09.
- How severe is CVE-2025-37847?
- Medium severity. CVSS v3 base score is 5.5 out of 10.