Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-21645

20
FAUCET Score

CVE-2025-21645 is a medium-severity vulnerability in the Linux kernel's platform/x86/amd/pmc driver, affecting systems running Linux. It stems from an unbalanced IRQ1 wake disable operation, leading to a WARN() message and potential system instability. The vulnerability has a CVSS score of 5.5 (MEDIUM), indicating a local attack vector with low complexity, requiring low privileges, and resulting in high availability impact. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
>= 5.15.95, < 5.16CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.1.11, < 6.1.140CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.2.1, < 6.6.72CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.7, < 6.12.10CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
6.2CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:6.2:-:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.24%
Probability of exploitation in next 30 days
EPSS Percentile
15.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0024 is in the 66th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (3)

redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: kernel
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt

Vendor Advisories (2)

redhatCVE-2025-21645Low

kernel: platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it

Jan 19, 2025
microsoft2025-Jan/CVE-2025-21645Moderate

platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it

Jan 14, 2025

References

cert-portal.siemens.com / productcert/html/ssa-019113.html
git.kernel.org / stable/c/5cc621085e2b7a9b1905a98f8e5a86bb4aea2016
Patch
git.kernel.org / stable/c/ab47d72b736e78d3c2370b26e0bfc46eb0918391
Patch
git.kernel.org / stable/c/b25778c87a6bce40c31e92364f08aa6240309e25
Patch
git.kernel.org / stable/c/dd410d784402c5775f66faf8b624e85e41c38aaf
Patch
lists.debian.org / debian-lts-announce/2025/08/msg00010.html