CVE-2025-21831

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
06/03/2025
Last modified:
29/10/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1<br /> <br /> commit 9d26d3a8f1b0 ("PCI: Put PCIe ports into D3 during suspend") sets the<br /> policy that all PCIe ports are allowed to use D3. When the system is<br /> suspended if the port is not power manageable by the platform and won&amp;#39;t be<br /> used for wakeup via a PME this sets up the policy for these ports to go<br /> into D3hot.<br /> <br /> This policy generally makes sense from an OSPM perspective but it leads to<br /> problems with wakeup from suspend on the TUXEDO Sirius 16 Gen 1 with a<br /> specific old BIOS. This manifests as a system hang.<br /> <br /> On the affected Device + BIOS combination, add a quirk for the root port of<br /> the problematic controller to ensure that these root ports are not put into<br /> D3hot at suspend.<br /> <br /> This patch is based on<br /> <br /> https://lore.kernel.org/linux-pci/20230708214457.1229-2-mario.limonciello@amd.com<br /> <br /> but with the added condition both in the documentation and in the code to<br /> apply only to the TUXEDO Sirius 16 Gen 1 with a specific old BIOS and only<br /> the affected root ports.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.8 (including) 6.6.78 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.12.14 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.13 (including) 6.13.3 (excluding)