CVE-2025-71180: counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
In the Linux kernel, the following vulnerability has been resolved:
counter: interrupt-cnt: Drop IRQFNOTHREAD flag
An IRQ handler can either be IRQFNOTHREAD or acquire spinlockt, as CONFIGPROVERAWLOCKNESTING warns: ============================= [ BUG: Invalid wait context ] 6.18.0-rc1+git... #1 ----------------------------- some-user-space-process/1251 is trying to lock: (&counter->eventslistlock){....}-{3:3}, at: counterpushevent [counter] other info that might help us debug this: context-{2:2} no locks held by some-user-space-process/.... stack backtrace: CPU: 0 UID: 0 PID: 1251 Comm: some-user-space-process 6.18.0-rc1+git... #1 PREEMPT Call trace: showstack (C) dumpstacklvl dumpstack lockacquire lockacquire rawspinlockirqsave counterpushevent [counter] interruptcntisr [interruptcnt] handleirqeventpercpu handleirqevent handlesimpleirq handleirqdesc generichandledomainirq gpioirqhandler handleirqdesc generichandledomainirq gichandleirq callonirqstack dointerrupthandler el0interrupt el0irqhandlercommon el0t64irqhandler el0t64irq
... and Sebastian correctly points out. Remove IRQFNOTHREAD as an alternative to switching to rawspinlockt, because the latter would limit all potential nested locks to rawspinlockt only.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71180?
CVE-2025-71180 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-71180?
To mitigate CVE-2025-71180, upgrade to the latest stable version of the Linux kernel that addresses this vulnerability.
What does the IRQF_NO_THREAD flag do in CVE-2025-71180?
The IRQF_NO_THREAD flag indicates that an IRQ handler should not be executed in a thread context, impacting how interrupts are handled.
Which versions of the Linux kernel are affected by CVE-2025-71180?
CVE-2025-71180 affects Linux kernel version 6.18.0-rc1 and possibly earlier versions.
Is CVE-2025-71180 remotely exploitable?
CVE-2025-71180 does not appear to be remotely exploitable as it requires local access to the system.