Circular Locking Dependency in Xilinx UARTPS Driver for Linux Kernel
CVE-2025-21820

5.5MEDIUM

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
27 February 2025

What is CVE-2025-21820?

A vulnerability in the Xilinx UARTPS driver of the Linux kernel has been identified, stemming from a circular locking dependency during sysrq handling. The issue occurs when the cdns_uart_console_write function attempts to acquire the port lock without the proper state check on port->sysrq, leading to potential deadlocks. The fix introduces a split in sysrq processing to ensure that the port lock is only acquired when necessary, thereby preventing such deadlocks and improving overall system stability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Linux 74ea66d4ca061a3cd4c0e924e51b60e924644852

Linux 74ea66d4ca061a3cd4c0e924e51b60e924644852

Linux 74ea66d4ca061a3cd4c0e924e51b60e924644852 < 8ea0e7b3d7b8f2f0fc9db491ff22a0abe120801c

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.