CVE-2025-71303

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) Fortinet (affected versions not specified)

Description A race condition exists in the Linux kernel within the accel/amdxdna component. When autosuspend is triggered, the rpm on flag is set to indicate a suspend/resume process is in progress. If a userspace application submits a command during this window, the amdxdna pm resume get() function may incorrectly skip the resume operation, leading to commands being submitted before the device has resumed.

Additionally, a remote code execution issue exists in Fortinet due to insufficient input validation in an API endpoint.

Recommendations For the Linux kernel, remove the use of the rpm on flag and implement aie2 pm set dpm() to explicitly resume the device before invoking set dpm(). At the moment, there is no information about a newer version that contains a fix for this vulnerability regarding Fortinet.