Threats tagged 'ghsa-pf4f-8wpm-5vh2'

CVE-2025-21951 is a vulnerability in the Linux kernel's bus mhi host pci_generic driver that can cause a deadlock. The issue arises because recovery work schedules asynchronous tasks that may attempt to reset a device while a device lock is held synchronously by the caller, leading to a deadlock condition. This was observed on the X1E80100 CRD device during shutdown and suspend callbacks. The fix involves using pci_try_reset_function() which attempts to acquire the device lock before resetting, avoiding deadlock by returning an error if the lock is unavailable.