CVE-2025-71303 accel/amdxdna: Fix race condition when checking rpm_on
A race condition in the AMD XDNA driver allows userspace to submit commands during suspend, causing unexpected behavior and potential denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-71303?
CVE-2025-71303 is a medium-severity vulnerability in Linux kernel, published on 27 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Fix race condition when checking rpm_on
When autosuspend is triggered, driver rpm_on flag is set to indicate that a suspend/resume is already in progress. However, when a userspace application submits a command during this narrow window, amdxdna_pm_resume_get() may incorrectly skip the resume operation because the rpm_on flag is still set. This results in commands being submitted while the device has not actually resumed, causing unexpected behavior.
The set_dpm() is called by suspend/resume, it relied on rpm_on flag to avoid calling into rpm suspend/resume recursivly. So to fix this, remove the use of the rpm_on flag entirely. Instead, introduce aie2_pm_set_dpm() which explicitly resumes the device before invoking set_dpm(). With this change, set_dpm() is called directly inside the suspend or resume execution path. Otherwise, aie2_pm_set_dpm() is called.
Weakness: CWE-362
Which versions are affected by CVE-2025-71303?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2025-71303?
Apply the vendor's patch.
Is CVE-2025-71303 being exploited?
There is no known exploitation of CVE-2025-71303 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as GHSA-9hw7-7g65-g445, UBUNTU-CVE-2025-71303.