Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…
EPSS 0.1%top 99%

A race condition vulnerability in the Linux kernel's amdxdna driver was fixed. (CVE-2025-71303)

0
Medium
Published: 05/27/2026 (05/27/2026, 15:33:10 UTC)
Source: GCVE Database

Description

A race condition vulnerability in the Linux kernel's amdxdna driver was fixed. The issue involved the rpm_on flag used during autosuspend to indicate suspend/resume in progress. A userspace command submitted during this window could be processed while the device was not fully resumed, causing unexpected behavior. The fix removed the rpm_on flag and introduced explicit device resume calls before power management operations.

CVSS v3.1

Score 4.7medium

Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 06/26/2026, 22:52:01 UTC

Technical Analysis

The Linux kernel's amdxdna driver had a race condition related to the rpm_on flag used to indicate suspend/resume status during autosuspend. When a userspace application submitted commands during the narrow window where rpm_on was set but the device was not fully resumed, amdxdna_pm_resume_get() could skip the resume operation incorrectly. This allowed commands to be submitted while the device was not ready, causing unexpected behavior. The fix removed reliance on the rpm_on flag and introduced a new function, aie2_pm_set_dpm(), which explicitly resumes the device before calling set_dpm(), ensuring proper suspend/resume sequencing.

Potential Impact

The vulnerability can cause commands to be submitted to the amdxdna device before it has fully resumed from autosuspend, leading to unexpected device behavior. The CVSS vector indicates no confidentiality or integrity impact but a high availability impact. There is no indication of exploitation in the wild.

Mitigation Recommendations

A fix has been implemented in the Linux kernel to address this race condition by removing the rpm_on flag and introducing explicit resume calls before power management operations. Since no patch links are provided, check the official Linux kernel advisories or source repositories for the specific patch. No additional mitigation steps are indicated.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Osv Id
GHSA-9hw7-7g65-g445
Osv Schema Version
1.4.0
Aliases
["CVE-2025-71303"]
Ecosystems
[]
Database Specific Severity
MODERATE
Cvss Version
3.1

Threat ID: 6a3ef7f227e9c79719036e42

Added to database: 06/26/2026, 22:06:42 UTC

Last enriched: 06/26/2026, 22:52:01 UTC

Last updated: 07/31/2026, 19:22:56 UTC

Views: 16

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses