CVE-2025-37745 describes a deadlock vulnerability in the Linux kernel's hibernate functionality, specifically within the hibernate_compressor_param_set() function. This issue arises when writing to "/sys/module/hibernate/parameters/compressor" concurrently with the registration of an ieee80211 device, affecting Linux kernel versions. Rated as Medium severity (CVSS 5.5), the vulnerability has a local attack vector with low complexity, requiring local privileges. Its potential impact is a denial of service (system crash) due to the deadlock, with no confidentiality or integrity impact. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. The vulnerability has garnered minimal community discussion and limited media coverage, primarily through Ubuntu security notices.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 6.12.24CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.13, < 6.13.12CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.14, < 6.14.3CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Linux kernel (Azure) vulnerabilities
Mar 25, 2026Linux kernel (Azure FIPS) vulnerabilities
Mar 4, 2026Linux kernel (Azure) vulnerabilities
Mar 4, 2026Linux kernel (Xilinx) vulnerabilities
Feb 24, 2026Linux kernel (IBM) vulnerabilities
Feb 24, 2026PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
May 13, 2025kernel: PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
May 1, 2025