CVE-2025-37907 is a medium-severity vulnerability in the Linux kernel's accel/ivpu component caused by an inconsistent locking order in the ivpu_job_submit function. This flaw leads to a deadlock during job submission and abort handling when locks are acquired in conflicting sequences by different threads. The issue arises because one thread locks the submitted_jobs lock before the file_priv lock, while another thread locks file_priv before submitted_jobs, causing a circular wait. The vulnerability does not impact confidentiality or integrity but can cause availability disruption due to deadlock.