PT-2025-17271

CVE-2025-38104

·

Published

2025-02-19

·

Updated

2026-10-18

Description by

CVSS 3.1
4.7
Medium
MetricsAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0
Description The issue is related to the use of a mutex for RLCG register access in the Linux kernel's amdgpu driver, which can lead to priority inversion in SRIOV environments. This occurs when a low-priority task holds a mutex that a high-priority task needs, causing conflicts and potentially leading to incorrect operations. The amdgpu virt rlcg reg rw function is particularly critical in this context, as it attempts to acquire the mutex. The call stack indicates that this function is invoked from amdgpu sriov wreg, which in turn is called from gmc v11 0 flush gpu tlb. The bug is identified by the message "[ BUG: Invalid wait context ]", which signifies that a thread is trying to acquire a mutex while in a context that does not allow it to sleep.
Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the RLCG register access priority inversion. As a temporary workaround, consider disabling the amdgpu virt rlcg reg rw function until a patch is available. Restrict access to the vulnerable module amdgpu to minimize the risk of exploitation. Avoid using the amdgpu sriov wreg function in the affected API endpoint until the issue is resolved.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
AZL-69643
DSA-5975-1
ECHO-EB7F-1367-AF82
SUSE-SU-2025:01964-1
SUSE-SU-2025_01964-1
SUSE-SU-2025:01965-1
SUSE-SU-2025_01965-1
SUSE-SU-2025:02000-1
SUSE-SU-2025_02000-1
SUSE-SU-2025:02254-1
SUSE-SU-2025_02254-1
SUSE-SU-2025:02307-1
SUSE-SU-2025_02307-1
SUSE-SU-2025:02333-1
SUSE-SU-2025_02333-1
SUSE-SU-2025:02923-1
SUSE-SU-2025:20408-1
SUSE-SU-2025:20413-1
SUSE-SU-2025:20419-1
SUSE-SU-2025:20421-1
USN-7594-1
USN-7594-2
USN-7594-3
USN-8028-1
USN-8028-2
USN-8028-3
USN-8028-4
USN-8028-5
USN-8028-6
USN-8028-7
USN-8028-8
USN-8031-1
USN-8031-2
USN-8031-3
USN-8052-1
USN-8052-2
USN-8074-1
USN-8074-2
USN-8126-1
Found an issue in the description? Have something to add? Feel free to write us 👾