CVE-2025-21824

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-21824
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-21824.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-21824
Downstream
Published
2025-02-27T20:06:14.720Z
Modified
2025-11-20T08:24:41.579847Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
gpu: host1x: Fix a use of uninitialized mutex
Details

In the Linux kernel, the following vulnerability has been resolved:

gpu: host1x: Fix a use of uninitialized mutex

commit c8347f915e67 ("gpu: host1x: Fix boot regression for Tegra") caused a use of uninitialized mutex leading to below warning when CONFIGDEBUGMUTEXES and CONFIGDEBUGLOCK_ALLOC are enabled.

[ 41.662843] ------------[ cut here ]------------ [ 41.663012] DEBUGLOCKSWARNON(lock->magic != lock) [ 41.663035] WARNING: CPU: 4 PID: 794 at kernel/locking/mutex.c:587 _mutexlock+0x670/0x878 [ 41.663458] Modules linked in: rtw888822c(+) bluetooth(+) rtw88pci rtw88core mac80211 aquantia libarc4 crcitut cfg80211 tegra194cpufreq dwmactegra(+) armdsupmu stmmacplatform stmmac pcsxpcs rfkill at24 host1x(+) tegrabpmpthermal ramoops reedsolomon fuse loop nfnetlink xfs mmcblock rpmbcore ucsiccg ina3221 crct10difce xhcitegra ghashce lm90 sha2ce sha256arm64 sha1ce sdhcitegra pwmfan sdhcipltfm sdhci gpiokeys rtctegra cqhci mmccore phytegraxusb i2ctegra tegra186gpcdma i2ctegrabpmp spitegra114 dmmirror dmregionhash dmlog dmmod [ 41.665078] CPU: 4 UID: 0 PID: 794 Comm: (udev-worker) Not tainted 6.11.0-29.311538613708.el10.aarch64+debug #1 [ 41.665838] Hardware name: NVIDIA NVIDIA Jetson AGX Orin Developer Kit/Jetson, BIOS 36.3.0-gcid-35594366 02/26/2024 [ 41.672555] pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 41.679636] pc : _mutexlock+0x670/0x878 [ 41.683834] lr : _mutexlock+0x670/0x878 [ 41.688035] sp : ffff800084b77090 [ 41.691446] x29: ffff800084b77160 x28: ffffdd4bebf7b000 x27: ffffdd4be96b1000 [ 41.698799] x26: 1fffe0002308361c x25: 1ffff0001096ee18 x24: 0000000000000000 [ 41.706149] x23: 0000000000000000 x22: 0000000000000002 x21: ffffdd4be6e3c7a0 [ 41.713500] x20: ffff800084b770f0 x19: ffff00011841b1e8 x18: 0000000000000000 [ 41.720675] x17: 0000000000000000 x16: 0000000000000000 x15: 0720072007200720 [ 41.728023] x14: 0000000000000000 x13: 0000000000000001 x12: ffff6001a96eaab3 [ 41.735375] x11: 1fffe001a96eaab2 x10: ffff6001a96eaab2 x9 : ffffdd4be4838bbc [ 41.742723] x8 : 00009ffe5691554e x7 : ffff000d4b755593 x6 : 0000000000000001 [ 41.749985] x5 : ffff000d4b755590 x4 : 1fffe0001d88f001 x3 : dfff800000000000 [ 41.756988] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000ec478000 [ 41.764251] Call trace: [ 41.766695] _mutexlock+0x670/0x878 [ 41.770373] mutexlocknested+0x2c/0x40 [ 41.774134] host1xintrstart+0x54/0xf8 [host1x] [ 41.778863] host1xruntimeresume+0x150/0x228 [host1x] [ 41.783935] pmgenericruntimeresume+0x84/0xc8 [ 41.788485] _rpmcallback+0xa0/0x478 [ 41.792422] rpmcallback+0x15c/0x1a8 [ 41.795922] rpmresume+0x698/0xc08 [ 41.799597] _pmruntimeresume+0xa8/0x140 [ 41.803621] host1xprobe+0x810/0xbc0 [host1x] [ 41.807909] platformprobe+0xcc/0x1a8 [ 41.811845] reallyprobe+0x188/0x800 [ 41.815347] _driverprobedevice+0x164/0x360 [ 41.819810] driverprobedevice+0x64/0x1a8 [ 41.823834] _driverattach+0x180/0x490 [ 41.827773] busforeachdev+0x104/0x1a0 [ 41.831797] driverattach+0x44/0x68 [ 41.835296] busadddriver+0x23c/0x4e8 [ 41.839235] driverregister+0x15c/0x3a8 [ 41.843170] _platformregisterdrivers+0xa4/0x208 [ 41.848159] tegrahost1xinit+0x4c/0xff8 [host1x] [ 41.853147] dooneinitcall+0xd4/0x380 [ 41.856997] doinitmodule+0x1dc/0x698 [ 41.860758] loadmodule+0xc70/0x1300 [ 41.864435] _dosysinitmodule+0x1a8/0x1d0 [ 41.868721] _arm64sysinitmodule+0x74/0xb0 [ 41.873183] invokesyscall.constprop.0+0xdc/0x1e8 [ 41.877997] doel0svc+0x154/0x1d0 [ 41.881671] el0svc+0x54/0x140 [ 41.884820] el0t64synchandler+0x120/0x130 [ 41.889285] el0t64sync+0x1a4/0x1a8 [ 41.892960] irq event stamp: 69737 [ 41.896370] hardirqs last enabled at (69737): [<ffffdd4be6d7768c>] rawspinunlockirqrestore+0x44/0xe8 [ 41.905739] hardirqs last disabled at (69736): ---truncated---

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c8347f915e6779f6c861e7a041adf3559d51b363
Fixed
396d8e5136b4476672bc15b83ba312486bb4bf76
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c8347f915e6779f6c861e7a041adf3559d51b363
Fixed
127e91638ddcd02b80de92fec2240609a9f90426
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c8347f915e6779f6c861e7a041adf3559d51b363
Fixed
02458fbfaa0170aabf8506f7d4ed054f02414251

Affected versions

v6.*

v6.12
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.10
v6.12.11
v6.12.12
v6.12.13
v6.12.14
v6.12.15
v6.12.2
v6.12.3
v6.12.4
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.13.1
v6.13.2
v6.13.3

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.12.0
Fixed
6.12.16
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.13.4