A race condition vulnerability in the Linux kernel's amdxdna driver was fixed. (CVE-2025-71303)
A race condition vulnerability in the Linux kernel's amdxdna driver was fixed. The issue involved the rpm_on flag used during autosuspend to indicate suspend/resume in progress. A userspace command submitted during this window could be processed while the device was not fully resumed, causing unexpected behavior. The fix removed the rpm_on flag and introduced explicit device resume calls before power management operations.
AI Analysis
Technical Summary
The Linux kernel's amdxdna driver had a race condition related to the rpm_on flag used to indicate suspend/resume status during autosuspend. When a userspace application submitted commands during the narrow window where rpm_on was set but the device was not fully resumed, amdxdna_pm_resume_get() could skip the resume operation incorrectly. This allowed commands to be submitted while the device was not ready, causing unexpected behavior. The fix removed reliance on the rpm_on flag and introduced a new function, aie2_pm_set_dpm(), which explicitly resumes the device before calling set_dpm(), ensuring proper suspend/resume sequencing.
Potential Impact
The vulnerability can cause commands to be submitted to the amdxdna device before it has fully resumed from autosuspend, leading to unexpected device behavior. The CVSS vector indicates no confidentiality or integrity impact but a high availability impact. There is no indication of exploitation in the wild.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this race condition by removing the rpm_on flag and introducing explicit resume calls before power management operations. Since no patch links are provided, check the official Linux kernel advisories or source repositories for the specific patch. No additional mitigation steps are indicated.
A race condition vulnerability in the Linux kernel's amdxdna driver was fixed. (CVE-2025-71303)
Description
A race condition vulnerability in the Linux kernel's amdxdna driver was fixed. The issue involved the rpm_on flag used during autosuspend to indicate suspend/resume in progress. A userspace command submitted during this window could be processed while the device was not fully resumed, causing unexpected behavior. The fix removed the rpm_on flag and introduced explicit device resume calls before power management operations.
CVSS v3.1
Score 4.7medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's amdxdna driver had a race condition related to the rpm_on flag used to indicate suspend/resume status during autosuspend. When a userspace application submitted commands during the narrow window where rpm_on was set but the device was not fully resumed, amdxdna_pm_resume_get() could skip the resume operation incorrectly. This allowed commands to be submitted while the device was not ready, causing unexpected behavior. The fix removed reliance on the rpm_on flag and introduced a new function, aie2_pm_set_dpm(), which explicitly resumes the device before calling set_dpm(), ensuring proper suspend/resume sequencing.
Potential Impact
The vulnerability can cause commands to be submitted to the amdxdna device before it has fully resumed from autosuspend, leading to unexpected device behavior. The CVSS vector indicates no confidentiality or integrity impact but a high availability impact. There is no indication of exploitation in the wild.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this race condition by removing the rpm_on flag and introducing explicit resume calls before power management operations. Since no patch links are provided, check the official Linux kernel advisories or source repositories for the specific patch. No additional mitigation steps are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-9hw7-7g65-g445
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2025-71303"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a3ef7f227e9c79719036e42
Added to database: 06/26/2026, 22:06:42 UTC
Last enriched: 06/26/2026, 22:52:01 UTC
Last updated: 07/31/2026, 19:22:56 UTC
Views: 16
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.