CVE-2025-21831
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
06/03/2025
Last modified:
29/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1<br />
<br />
commit 9d26d3a8f1b0 ("PCI: Put PCIe ports into D3 during suspend") sets the<br />
policy that all PCIe ports are allowed to use D3. When the system is<br />
suspended if the port is not power manageable by the platform and won&#39;t be<br />
used for wakeup via a PME this sets up the policy for these ports to go<br />
into D3hot.<br />
<br />
This policy generally makes sense from an OSPM perspective but it leads to<br />
problems with wakeup from suspend on the TUXEDO Sirius 16 Gen 1 with a<br />
specific old BIOS. This manifests as a system hang.<br />
<br />
On the affected Device + BIOS combination, add a quirk for the root port of<br />
the problematic controller to ensure that these root ports are not put into<br />
D3hot at suspend.<br />
<br />
This patch is based on<br />
<br />
https://lore.kernel.org/linux-pci/20230708214457.1229-2-mario.limonciello@amd.com<br />
<br />
but with the added condition both in the documentation and in the code to<br />
apply only to the TUXEDO Sirius 16 Gen 1 with a specific old BIOS and only<br />
the affected root ports.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.8 (including) | 6.6.78 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.7 (including) | 6.12.14 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.13 (including) | 6.13.3 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



