Skip to main content

Deadlock

CVE-2025-1713

High
7.5/10

Summary

When setting up interrupt remapping for legacy PCI(-X) devices, including PCI(-X) bridges, a lookup of the upstream bridge is required. This lookup involves acquiring a lock, but it is performed in a context where acquiring that lock is unsafe. This can potentially lead to a deadlock. This issue affects xen versions through 4.18.4, 4.19.0-rc1 through 4.19.1, 4.20-dev through 4.20.0-rc5, and 4.21-dev.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-833 - Deadlock

The software contains multiple threads or executable segments that are waiting for each other to release a necessary lock, resulting in deadlock.

References

Advisory Timeline

  • Published