CVE-2025-37745

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()

syzbot reported a deadlock in lock_system_sleep() (see below).

The write operation to "/sys/module/hibernate/parameters/compressor"

conflicts with the registration of ieee80211 device, resulting in a deadlock

when attempting to acquire system_transition_mutex under param_lock.

To avoid this deadlock, change hibernate_compressor_param_set() to use

mutex_trylock() for attempting to acquire system_transition_mutex and

return -EBUSY when it fails.

Task flags need not be saved or adjusted before calling

mutex_trylock(&system_transition_mutex) because the caller is not going

to end up waiting for this mutex and if it runs concurrently with system

suspend in progress, it will be frozen properly when it returns to user

space.

syzbot report:

syz-executor895/5833 is trying to acquire lock:

ffffffff8e0828c8 (system_transition_mutex){+.+.}-{4:4}, at: lock_sys

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References