Medium 5.5Published Jan 19, 2025

CVE-2025-21645platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it

Updated under an hour ago (Oct 27, 2026, 3:23 AM ET)

Does this affect you?

It affects Linux and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it Wakeup for IRQ1 should be disabled only in cases where i8042 had actually enabled it, otherwise "wake_depth" for this IRQ will try to drop below zero and there will be an unpleasant WARN() logged: kernel: atkbd serio0: Disabling IRQ1 wakeup source to avoid platform firmware bug kernel: ------------[ cut here ]------------ kernel: Unbalanced IRQ 1 wake disable kernel: WARNING: CPU: 10 PID: 6431 at kernel/irq/manage.c:920 irq_set_irq_wake+0x147/0x1a0 The PMC driver uses DEFINE_SIMPLE_DEV_PM_OPS() to define its dev_pm_ops which sets amd_pmc_suspend_handler() to the .suspend, .freeze, and .poweroff handlers. i8042_pm_suspend(), however, is only set as the .suspend handler. Fix the issue by call PMC suspend handler only from the same set of dev_pm_ops handlers as i8042_pm_suspend(), which currently means just the .suspend handler. To reproduce this issue try hibernating (S4) the machine after a fresh boot without putting it into s2idle first. [ij: edited the commit message.]

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 72e5a83b7c8401856cc3732150af24e43726717a before ab47d72b736e78d3c2370b26e0bfc46eb0918391; 8e60615e8932167057b363c11a7835da7f007106 builds before 5cc621085e2b7a9b1905a98f8e5a86bb4aea2016; from 8e60615e8932167057b363c11a7835da7f007106 before b25778c87a6bce40c31e92364f08aa6240309e25; from 8e60615e8932167057b363c11a7835da7f007106 before dd410d784402c5775f66faf8b624e85e41c38aaf; 3fc9dc0340e0b5df8059313537b55f82c1e84e94; from 6.1.11 before 6.1.140; from 5.15.95 before 5.16	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
linux linux_kernel linux:linux_kernel	from 5.15.95 before 5.16; from 6.1.11 before 6.1.140; from 6.2.1 before 6.6.72; from 6.7 before 6.12.10; 6.2; 6.2; 6.2; 6.2; and 6 more ranges	NVD

References

References

https://git.kernel.org/stable/c/ab47d72b736e78d3c2370b26e0bfc46eb0918391	patch
https://git.kernel.org/stable/c/5cc621085e2b7a9b1905a98f8e5a86bb4aea2016	patch
https://git.kernel.org/stable/c/b25778c87a6bce40c31e92364f08aa6240309e25	patch
https://git.kernel.org/stable/c/dd410d784402c5775f66faf8b624e85e41c38aaf	patch
https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-457936.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.