Vulnerability · Published Feb 9, 2025 · Assigned by Linux
CVE-2025-21684gpio: xilinx: Convert gpio_lock to raw spinlock
Medium 5.5
In plain English
A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
In the Linux kernel, the following vulnerability has been resolved: gpio: xilinx: Convert gpio_lock to raw spinlock irq_chip functions may be called in raw spinlock context. Therefore, we must also use a raw spinlock for our own internal locking. This fixes the following lockdep splat: [ 5.349336] ============================= [ 5.353349] [ BUG: Invalid wait context ] [ 5.357361] 6.13.0-rc5+ #69 Tainted: G W [ 5.363031] ----------------------------- [ 5.367045] kworker/u17:1/44 is trying to lock: [ 5.371587] ffffff88018b02c0 (&chip->gpio_lock){....}-{3:3}, at: xgpio_irq_unmask (drivers/gpio/gpio-xilinx.c:433 (discriminator 8)) [ 5.380079] other info that might help us debug this: [ 5.385138] context-{5:5} [ 5.387762] 5 locks held by kworker/u17:1/44: [ 5.392123] #0: ffffff8800014958 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work (kernel/workqueue.c:3204) [ 5.402260] #1: ffffffc082fcbdd8 (deferred_probe_work){+.+.}-{0:0}, at: process_one_work (kernel/workqueue.c:3205) [ 5.411528] #2: ffffff880172c900 (&dev->mutex){....}-{4:4}, at: __device_attach (drivers/base/dd.c:1006) [ 5.419929] #3: ffffff88039c8268 (request_class#2){+.+.}-{4:4}, at: __setup_irq (kernel/irq/internals.h:156 kernel/irq/manage.c:1596) [ 5.428331] #4: ffffff88039c80c8 (lock_class#2){....}-{2:2}, at: __setup_irq (kernel/irq/manage.c:1614) [ 5.436472] stack backtrace: [ 5.439359] CPU: 2 UID: 0 PID: 44 Comm: kworker/u17:1 Tainted: G W 6.13.0-rc5+ #69 [ 5.448690] Tainted: [W]=WARN [ 5.451656] Hardware name: xlnx,zynqmp (DT) [ 5.455845] Workqueue: events_unbound deferred_probe_work_func [ 5.461699] Call trace: [ 5.464147] show_stack+0x18/0x24 C [ 5.467821] dump_stack_lvl (lib/dump_stack.c:123) [ 5.471501] dump_stack (lib/dump_stack.c:130) [ 5.474824] __lock_acquire (kernel/locking/lockdep.c:4828 kernel/locking/lockdep.c:4898 kernel/locking/lockdep.c:5176) [ 5.478758] lock_acquire (arch/arm64/include/asm/percpu.h:40 kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5851 kernel/locking/lockdep.c:5814) [ 5.482429] _raw_spin_lock_irqsave (include/linux/spinlock_api_smp.h:111 kernel/locking/spinlock.c:162) [ 5.486797] xgpio_irq_unmask (drivers/gpio/gpio-xilinx.c:433 (discriminator 8)) [ 5.490737] irq_enable (kernel/irq/internals.h:236 kernel/irq/chip.c:170 kernel/irq/chip.c:439 kernel/irq/chip.c:432 kernel/irq/chip.c:345) [ 5.494060] __irq_startup (kernel/irq/internals.h:241 kernel/irq/chip.c:180 kernel/irq/chip.c:250) [ 5.497645] irq_startup (kernel/irq/chip.c:270) [ 5.501143] __setup_irq (kernel/irq/manage.c:1807) [ 5.504728] request_threaded_irq (kernel/irq/manage.c:2208)
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | linux | 6.1.129-1 | DEBIAN-CVE-2025-21684 |
| Debian:13 | linux | 6.12.11-1 | DEBIAN-CVE-2025-21684 |
| Debian:14 | linux | 6.12.11-1 | DEBIAN-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux | 5.15.0-140.150 | USN-7510-1 |
| Ubuntu:22.04:LTS | linux | 5.15.0-140.150 | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux | 6.8.0-62.65 | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux | 6.8.0-62.65 | USN-7595-1 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1084.91 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1084.91 | USN-7510-7 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1030.32 | USN-7595-1 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1030.32 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | 6.8.0-1030.32~22.04.1 | USN-7595-1 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | 6.8.0-1030.32~22.04.1 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1089.98 | USN-7510-3 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1089.98 | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1030.35 | USN-7596-1 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1030.35 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-azure-6.11 | 6.11.0-1013.13~24.04.1 | USN-7448-1 |
| Ubuntu:24.04:LTS | linux-azure-6.11 | 6.11.0-1013.13~24.04.1 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | 6.8.0-1030.35~22.04.1 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | 6.8.0-1030.35~22.04.1 | USN-7596-1 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1089.98.1 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-azure-nvidia | 6.8.0-1018.19 | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-azure-nvidia | 6.8.0-1018.19 | USN-7596-2 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1083.92 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1083.92 | USN-7511-1 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1031.33 | USN-7595-5 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1031.33 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-gcp-6.11 | 6.11.0-1013.13~24.04.1 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | 6.8.0-1031.33~22.04.1 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | 6.8.0-1031.33~22.04.1 | USN-7595-5 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1081.87 | USN-7511-3 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1081.87 | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1026.30 | USN-7595-1 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1026.30 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1066.74 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1066.74 | USN-7510-1 |
| Ubuntu:24.04:LTS | linux-gkeop | 6.8.0-1013.15 | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-gkeop | 6.8.0-1013.15 | USN-7595-1 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-hwe-6.11 | 6.11.0-24.24~24.04.1 | USN-7445-1 |
| Ubuntu:24.04:LTS | linux-hwe-6.11 | 6.11.0-24.24~24.04.1 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-hwe-6.8 | 6.8.0-64.67~22.04.1 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1076.79 | USN-7510-1 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1076.79 | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1027.27 | USN-7595-1 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1027.27 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-ibm-6.8 | 6.8.0-1027.27~22.04.1 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1079.85 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1079.85 | USN-7510-1 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1080.85 | USN-7510-1 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1080.85 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-140.150 | USN-7510-1 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-140.150 | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-62.65.1 | USN-7595-1 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-62.65.1 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-lowlatency-hwe-6.11 | 6.11.0-1012.13~24.04.1 | USN-7445-1 |
| Ubuntu:24.04:LTS | linux-lowlatency-hwe-6.11 | 6.11.0-1012.13~24.04.1 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-62.65.1~22.04.1 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-62.65.1~22.04.1 | USN-7595-1 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1078.79 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1078.79 | USN-7510-1 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1029.32 | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1029.32 | USN-7595-1 |
| Ubuntu:24.04:LTS | linux-nvidia-6.11 | 6.11.0-1007.7 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1029.32~22.04.1 | USN-7595-1 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1029.32~22.04.1 | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1029.32.1 | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1029.32.1 | USN-7595-1 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1037.37 | USN-7510-3 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1037.37 | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-nvidia-tegra | 6.8.0-1008.8 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1026.26 | USN-7510-7 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1026.26 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-oem-6.11 | 6.11.0-1020.20 | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-oem-6.11 | 6.11.0-1020.20 | USN-7445-1 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | 6.8.0-1029.29 | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | 6.8.0-1029.29 | USN-7595-1 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1081.87 | USN-7510-1 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1081.87 | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1027.28 | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1027.28 | USN-7595-4 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1027.28~22.04.1 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1027.28~22.04.1 | USN-7595-4 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1078.81 | USN-7510-7 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1078.81 | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1029.33 | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1029.33 | USN-7595-4 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-riscv-6.8 | 6.8.0-62.65~22.04.1 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2025-21684 |
| Ubuntu:24.04:LTS | linux-xilinx | 6.8.0-1017.18 | UBUNTU-CVE-2025-21684 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1050.54 | UBUNTU-CVE-2025-21684 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | a32c7caea292c4d1e417eae6e5a348d187546acf – before d25041d4a3b2af64c888cf762362b2528ba59294a32c7caea292c4d1e417eae6e5a348d187546acf – before f0ed2d0abc021f56fa27dc6d0770535c1851a43ba32c7caea292c4d1e417eae6e5a348d187546acf – before b0111650ee596219bb5defa0ce1a1308e6e77ccfa32c7caea292c4d1e417eae6e5a348d187546acf – before 9c035105c5537d2ecad6b9415e9417a1ffbd0a62a32c7caea292c4d1e417eae6e5a348d187546acf – before 9860370c2172704b6b4f0075a0c2a29fd84af96a |
| Linux | Linux | 5.12 |
References
- https://git.kernel.org/stable/c/d25041d4a3b2af64c888cf762362b2528ba59294
- https://git.kernel.org/stable/c/f0ed2d0abc021f56fa27dc6d0770535c1851a43b
- https://git.kernel.org/stable/c/b0111650ee596219bb5defa0ce1a1308e6e77ccf
- https://git.kernel.org/stable/c/9c035105c5537d2ecad6b9415e9417a1ffbd0a62
- https://git.kernel.org/stable/c/9860370c2172704b6b4f0075a0c2a29fd84af96a
- https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html