CVE-2025-22014

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

soc: qcom: pdr: Fix the potential deadlock

When some client process A call pdr_add_lookup() to add the look up for

the service and does schedule locator work, later a process B got a new

server packet indicating locator is up and call pdr_locator_new_server()

which eventually sets pdr->locator_init_complete to true which process A

sees and takes list lock and queries domain list but it will timeout due

to deadlock as the response will queued to the same qmi->wq and it is

ordered workqueue and process B is not able to complete new server

request work due to deadlock on list lock.

Fix it by removing the unnecessary list iteration as the list iteration

is already being done inside locator work, so avoid it here and just

call schedule_work() here.

Process A Process B

process_scheduled_works()

pdr_add_lookup() qmi_data_ready_work()

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References