CVE-2025-37745

一、漏洞信息
 漏洞编号：[CVE-2025-37745](https://nvd.nist.gov/vuln/detail/CVE-2025-37745)
 漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)
 漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.19,6.4.0,6.6.0
 CVSS V3.0分值：
  BaseScore：5.5 Medium
  Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
 漏洞简述：
  In the Linux kernel, the following vulnerability has been resolved:PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()syzbot reported a deadlock in lock_system_sleep() (see below).The write operation to  /sys/module/hibernate/parameters/compressor conflicts with the registration of ieee80211 device, resulting in a deadlockwhen attempting to acquire system_transition_mutex under param_lock.To avoid this deadlock, change hibernate_compressor_param_set() to usemutex_trylock() for attempting to acquire system_transition_mutex andreturn -EBUSY when it fails.Task flags need not be saved or adjusted before callingmutex_trylock(&system_transition_mutex) because the caller is not goingto end up waiting for this mutex and if it runs concurrently with systemsuspend in progress, it will be frozen properly when it returns to userspace.syzbot report:syz-executor895/5833 is trying to acquire lock:ffffffff8e0828c8 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 kernel/power/main.c:56but task is already holding lock:ffffffff8e07dc68 (param_lock){+.+.}-{4:4}, at: kernel_param_lock kernel/params.c:607 [inline]ffffffff8e07dc68 (param_lock){+.+.}-{4:4}, at: param_attr_store+0xe6/0x300 kernel/params.c:586which lock already depends on the new lock.the existing dependency chain (in reverse order) is:-> #3 (param_lock){+.+.}-{4:4}:       __mutex_lock_common kernel/locking/mutex.c:585 [inline]       __mutex_lock+0x19b/0xb10 kernel/locking/mutex.c:730       ieee80211_rate_control_ops_get net/mac80211/rate.c:220 [inline]       rate_control_alloc net/mac80211/rate.c:266 [inline]       ieee80211_init_rate_ctrl_alg+0x18d/0x6b0 net/mac80211/rate.c:1015       ieee80211_register_hw+0x20cd/0x4060 net/mac80211/main.c:1531       mac80211_hwsim_new_radio+0x304e/0x54e0 drivers/net/wireless/virtual/mac80211_hwsim.c:5558       init_mac80211_hwsim+0x432/0x8c0 drivers/net/wireless/virtual/mac80211_hwsim.c:6910       do_one_initcall+0x128/0x700 init/main.c:1257       do_initcall_level init/main.c:1319 [inline]       do_initcalls init/main.c:1335 [inline]       do_basic_setup init/main.c:1354 [inline]       kernel_init_freeable+0x5c7/0x900 init/main.c:1568       kernel_init+0x1c/0x2b0 init/main.c:1457       ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148       ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244-> #2 (rtnl_mutex){+.+.}-{4:4}:       __mutex_lock_common kernel/locking/mutex.c:585 [inline]       __mutex_lock+0x19b/0xb10 kernel/locking/mutex.c:730       wg_pm_notification drivers/net/wireguard/device.c:80 [inline]       wg_pm_notification+0x49/0x180 drivers/net/wireguard/device.c:64       notifier_call_chain+0xb7/0x410 kernel/notifier.c:85       notifier_call_chain_robust kernel/notifier.c:120 [inline]       blocking_notifier_call_chain_robust kernel/notifier.c:345 [inline]       blocking_notifier_call_chain_robust+0xc9/0x170 kernel/notifier.c:333       pm_notifier_call_chain_robust+0x27/0x60 kernel/power/main.c:102       snapshot_open+0x189/0x2b0 kernel/power/user.c:77       misc_open+0x35a/0x420 drivers/char/misc.c:179       chrdev_open+0x237/0x6a0 fs/char_dev.c:414       do_dentry_open+0x735/0x1c40 fs/open.c:956       vfs_open+0x82/0x3f0 fs/open.c:1086       do_open fs/namei.c:3830 [inline]       path_openat+0x1e88/0x2d80 fs/namei.c:3989       do_filp_open+0x20c/0x470 fs/namei.c:4016       do_sys_openat2+0x17a/0x1e0 fs/open.c:1428       do_sys_open fs/open.c:1443 [inline]       __do_sys_openat fs/open.c:1459 [inline]       __se_sys_openat fs/open.c:1454 [inline]       __x64_sys_openat+0x175/0x210 fs/open.c:1454       do_syscall_x64 arch/x86/entry/common.c:52 [inline]       do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83       entry_SYSCALL_64_after_hwframe+0x77/0x7f-> #1 ((pm_chain_head).rwsem){++++}-{4:4}:       down_read+0x9a/0x330 kernel/locking/rwsem.c:1524       blocking_notifier_call_chain_robust kerne---truncated---
 漏洞公开时间：2025-05-01 21:15:53
 漏洞创建时间：2025-05-01 21:51:06
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2025-37745
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/11ae4fec1f4b4ee06770a572c37d89cbaecbf66e |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/3b2c3806ef4253595dfcb8b58352cfab55c9bfb0 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/52323ed1444ea5c2a5f1754ea0a2d9c8c216ccdf |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/6dbaa8583af74814a5aae03a337cb1722c414808 |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-37745 | https://bugzilla.suse.com/show_bug.cgi?id=1242853 |
| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2025-37745 | https://bugzilla.suse.com/show_bug.cgi?id=1242853 |
| suse_bugzilla | https://git.kernel.org/stable/c/11ae4fec1f4b4ee06770a572c37d89cbaecbf66e | https://bugzilla.suse.com/show_bug.cgi?id=1242853 |
| suse_bugzilla | https://git.kernel.org/stable/c/3b2c3806ef4253595dfcb8b58352cfab55c9bfb0 | https://bugzilla.suse.com/show_bug.cgi?id=1242853 |
| suse_bugzilla | https://git.kernel.org/stable/c/52323ed1444ea5c2a5f1754ea0a2d9c8c216ccdf | https://bugzilla.suse.com/show_bug.cgi?id=1242853 |
| suse_bugzilla | https://git.kernel.org/stable/c/6dbaa8583af74814a5aae03a337cb1722c414808 | https://bugzilla.suse.com/show_bug.cgi?id=1242853 |
| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2025/CVE-2025-37745.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1242853 |
| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2363263 | https://bugzilla.suse.com/show_bug.cgi?id=1242853 |
| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2025050135-CVE-2025-37745-0aaf@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2363263 |
| anolis |  | https://anas.openanolis.cn/cves/detail/CVE-2025-37745 |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

无
</details>

二、漏洞分析结构反馈
 影响性分析说明：
                            In the Linux kernel, the following vulnerability has been resolved:PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()syzbot reported a deadlock in lock_system_sleep() (see below).The write operation to &#34;/sys/module/hibernate/parameters/compressor&#34;conflicts with the registration of ieee80211 device, resulting in a deadlockwhen attempting to acquire system_transition_mutex under param_lock.To avoid this deadlock, change hibernate_compressor_param_set() to usemutex_trylock() for attempting to acquire system_transition_mutex andreturn -EBUSY when it fails.Task flags need not be saved or adjusted before callingmutex_trylock(&#38;system_transition_mutex) because the caller is not goingto end up waiting for this mutex and if it runs concurrently with systemsuspend in progress, it will be frozen properly when it returns to userspace.syzbot report:syz-executor895/5833 is trying to acquire lock:ffffffff8e0828c8 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 kernel/power/main.c:56but task is already holding lock:ffffffff8e07dc68 (param_lock){+.+.}-{4:4}, at: kernel_param_lock kernel/params.c:607 [inline]ffffffff8e07dc68 (param_lock){+.+.}-{4:4}, at: param_attr_store+0xe6/0x300 kernel/params.c:586which lock already depends on the new lock.the existing dependency chain (in reverse order) is:-&gt; #3 (param_lock){+.+.}-{4:4}:       __mutex_lock_common kernel/locking/mutex.c:585 [inline]       __mutex_lock+0x19b/0xb10 kernel/locking/mutex.c:730       ieee80211_rate_control_ops_get net/mac80211/rate.c:220 [inline]       rate_control_alloc net/mac80211/rate.c:266 [inline]       ieee80211_init_rate_ctrl_alg+0x18d/0x6b0 net/mac80211/rate.c:1015       ieee80211_register_hw+0x20cd/0x4060 net/mac80211/main.c:1531       mac80211_hwsim_new_radio+0x304e/0x54e0 drivers/net/wireless/virtual/mac80211_hwsim.c:5558       init_mac80211_hwsim+0x432/0x8c0 drivers/net/wireless/virtual/mac80211_hwsim.c:6910       do_one_initcall+0x128/0x700 init/main.c:1257       do_initcall_level init/main.c:1319 [inline]       do_initcalls init/main.c:1335 [inline]       do_basic_setup init/main.c:1354 [inline]       kernel_init_freeable+0x5c7/0x900 init/main.c:1568       kernel_init+0x1c/0x2b0 init/main.c:1457       ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148       ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244-&gt; #2 (rtnl_mutex){+.+.}-{4:4}:       __mutex_lock_common kernel/locking/mutex.c:585 [inline]       __mutex_lock+0x19b/0xb10 kernel/locking/mutex.c:730       wg_pm_notification drivers/net/wireguard/device.c:80 [inline]       wg_pm_notification+0x49/0x180 drivers/net/wireguard/device.c:64       notifier_call_chain+0xb7/0x410 kernel/notifier.c:85       notifier_call_chain_robust kernel/notifier.c:120 [inline]       blocking_notifier_call_chain_robust kernel/notifier.c:345 [inline]       blocking_notifier_call_chain_robust+0xc9/0x170 kernel/notifier.c:333       pm_notifier_call_chain_robust+0x27/0x60 kernel/power/main.c:102       snapshot_open+0x189/0x2b0 kernel/power/user.c:77       misc_open+0x35a/0x420 drivers/char/misc.c:179       chrdev_open+0x237/0x6a0 fs/char_dev.c:414       do_dentry_open+0x735/0x1c40 fs/open.c:956       vfs_open+0x82/0x3f0 fs/open.c:1086       do_open fs/namei.c:3830 [inline]       path_openat+0x1e88/0x2d80 fs/namei.c:3989       do_filp_open+0x20c/0x470 fs/namei.c:4016       do_sys_openat2+0x17a/0x1e0 fs/open.c:1428       do_sys_open fs/open.c:1443 [inline]       __do_sys_openat fs/open.c:1459 [inline]       __se_sys_openat fs/open.c:1454 [inline]       __x64_sys_openat+0x175/0x210 fs/open.c:1454       do_syscall_x64 arch/x86/entry/common.c:52 [inline]       do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83       entry_SYSCALL_64_after_hwframe+0x77/0x7f-&gt; #1 ((pm_chain_head).rwsem){++++}-{4:4}:       down_read+0x9a/0x330 kernel/locking/rwsem.c:1524       blocking_notifier_call_chain_robust kernel/notifier.c:344 [inline]       blocking_notifier_call_chain_robust+0xa9/0x170 kernel/notifier.c:333       pm_notifier_call_chain_robust+0x27/0x60
 openEuler评分：
  4.4
 Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
 受影响版本排查(受影响/不受影响)：
  1.master(6.12.33):不受影响
2.openEuler-20.03-LTS-SP4(4.19.90):不受影响
3.openEuler-22.03-LTS-SP3(5.10.0):不受影响
4.openEuler-22.03-LTS-SP4(5.10.0):不受影响
5.openEuler-24.03-LTS:不受影响
6.openEuler-24.03-LTS-Next:不受影响
7.openEuler-24.03-LTS-SP1:不受影响
8.openEuler-24.03-LTS-SP2:不受影响

修复是否涉及abi变化(是/否)：
  1.master(6.12.33):否
2.openEuler-20.03-LTS-SP4(4.19.90):否
3.openEuler-22.03-LTS-SP3(5.10.0):否
4.openEuler-22.03-LTS-SP4(5.10.0):否
5.openEuler-24.03-LTS:否
6.openEuler-24.03-LTS-Next:否
7.openEuler-24.03-LTS-SP1:否
8.openEuler-24.03-LTS-SP2:否

原因说明：
  1.master(6.12.33):不受影响-漏洞代码不能被攻击者触发
2.openEuler-24.03-LTS-Next:不受影响-漏洞代码不能被攻击者触发
3.openEuler-20.03-LTS-SP4(4.19.90):不受影响-漏洞代码不存在
4.openEuler-22.03-LTS-SP3(5.10.0):不受影响-漏洞代码不存在
5.openEuler-22.03-LTS-SP4(5.10.0):不受影响-漏洞代码不存在
6.openEuler-24.03-LTS:不受影响-漏洞代码不存在
7.openEuler-24.03-LTS-SP1:不受影响-漏洞代码不存在
8.openEuler-24.03-LTS-SP2:不受影响-漏洞代码不存在

src-openEuler/kernel
关闭

内容风险标识

评论 (5)

src-openEuler/kernel关闭 .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2025-37745

评论 (5)

搜索帮助

src-openEuler/kernel
关闭