# CVE-2025-21645

## Summary

- **CVE ID:** CVE-2025-21645
- **Severity:** MEDIUM
- **CVSS Score:** 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
- **CWE:** N/A
- **Published:** Jan 19, 2025
- **Last Modified:** Sep 8, 2026

## Description

In the Linux kernel, the following vulnerability has been resolved:

platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it

Wakeup for IRQ1 should be disabled only in cases where i8042 had
actually enabled it, otherwise "wake_depth" for this IRQ will try to
drop below zero and there will be an unpleasant WARN() logged:

kernel: atkbd serio0: Disabling IRQ1 wakeup source to avoid platform firmware bug
kernel: ------------[ cut here ]------------
kernel: Unbalanced IRQ 1 wake disable
kernel: WARNING: CPU: 10 PID: 6431 at kernel/irq/manage.c:920 irq_set_irq_wake+0x147/0x1a0

The PMC driver uses DEFINE_SIMPLE_DEV_PM_OPS() to define its dev_pm_ops
which sets amd_pmc_suspend_handler() to the .suspend, .freeze, and
.poweroff handlers. i8042_pm_suspend(), however, is only set as
the .suspend handler.

Fix the issue by call PMC suspend handler only from the same set of
dev_pm_ops handlers as i8042_pm_suspend(), which currently means just
the .suspend handler.

To reproduce this issue try hibernating (S4) the machine after a fresh boot
without putting it into s2idle first.

[ij: edited the commit message.]

## Affected Products

- Linux — Linux (72e5a83b7c8401856cc3732150af24e43726717a)
- Linux — Linux (8e60615e8932167057b363c11a7835da7f007106)
- Linux — Linux (3fc9dc0340e0b5df8059313537b55f82c1e84e94)
- Linux — Linux (6.2)
- Linux — Linux (0)
- Linux — Linux (6.1.140)
- Linux — Linux (6.6.72)
- Linux — Linux (6.12.10)
- Linux — Linux (6.13)
- Linux — Linux (6.1.11)
- Linux — Linux (5.15.95)

## References

- [CNA](https://git.kernel.org/stable/c/ab47d72b736e78d3c2370b26e0bfc46eb0918391)
- [CNA](https://git.kernel.org/stable/c/5cc621085e2b7a9b1905a98f8e5a86bb4aea2016)
- [CNA](https://git.kernel.org/stable/c/b25778c87a6bce40c31e92364f08aa6240309e25)
- [CNA](https://git.kernel.org/stable/c/dd410d784402c5775f66faf8b624e85e41c38aaf)
- [CVE](https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html)
- [siemens-SADP](https://cert-portal.siemens.com/productcert/html/ssa-019113.html)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.25%
- **EPSS Percentile:** 16.2

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-20._