---
id: CVE-2025-71303
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  accel/amdxdna: Fix race condition when checking rpm_on

  When autosuspend is triggered, driver rpm_on flag is set to indicate that
  a suspend/resume is already in progres…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  accel/amdxdna: Fix race condition when checking rpm_on

  When autosuspend is triggered, driver rpm_on flag is set to indicate that
  a suspend/resume is already in progres…
severity: medium
cvss: 4.7
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-362
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.19, < 6.19.4'
patched:
  - linux_kernel 6.19.4
published: '2026-05-27'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T13:10:00.187'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71303'
references:
  - url: 'https://git.kernel.org/stable/c/00ffe45ece80160aef446d74ded906352f21dd72'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e7cb75b6a5127d78298e39750b4f3185eca0dafc'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00102
epssPercentile: 0.00883
ingestedAt: '2026-10-14T13:30:58.504Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: Fix race condition when checking rpm_on

When autosuspend is triggered, driver rpm_on flag is set to indicate that
a suspend/resume is already in progress. However, when a userspace
application submits a command during this narrow window,
amdxdna_pm_resume_get() may incorrectly skip the resume operation because
the rpm_on flag is still set. This results in commands being submitted
while the device has not actually resumed, causing unexpected behavior.

The set_dpm() is called by suspend/resume, it relied on rpm_on flag to
avoid calling into rpm suspend/resume recursivly. So to fix this, remove
the use of the rpm_on flag entirely. Instead, introduce aie2_pm_set_dpm()
which explicitly resumes the device before invoking set_dpm(). With this
change, set_dpm() is called directly inside the suspend or resume execution
path. Otherwise, aie2_pm_set_dpm() is called.

## Affected

- `linux_kernel >= 6.19, < 6.19.4`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.19.4`