System Hang Risk in Linux Kernel due to PSR1 Hardware Lock Management
Summary
CVE-2025-21819: In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd/display: Use HW lock mgr for PSR1" This reverts commit a2b5a9956269 ("drm/amd/display: Use HW lock mgr for PSR1") Because it may cause s... Affects linux versions < 6.1.129-1. Fixed in 6.1.129-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It is known for its stability, performance, and support for a wide range of hardware. However, vulnerabilities can arise, impacting system reliability and performance. This specific issue relates to the handling of PSR1 (Panel Self Refresh) in AMD display drivers, which can lead to system hangs when connecting two eDP (embedded DisplayPort) panels.
Vulnerability Detail
The vulnerability, identified as CVE-2025-21819, originates from a commit that attempted to enhance the PSR1 functionality by using a hardware lock manager. However, this change inadvertently introduced a risk of system hangs when two eDP panels are connected. The issue can severely affect user experience, leading to unresponsive systems and potential data loss if not addressed promptly.
How To Fix
Minimum fixed version
6.1.129-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disconnect one of the eDP panels to prevent system hangs until the kernel is updated. This is not a permanent solution but can help maintain system stability in the interim.
Conclusion
CVE-2025-21819 presents a significant risk to users of the Linux kernel, particularly those utilizing AMD display drivers with multiple eDP panels. It is crucial to apply the necessary updates to mitigate this vulnerability and ensure system stability.
See every vulnerability recorded for linux →
FAQ
CVE-2025-21819 is a vulnerability in the Linux kernel related to the handling of PSR1 functionality in AMD display drivers, which can cause system hangs when two eDP panels are connected.
You can use Vulert, which monitors open-source vulnerabilities in your software. By utilizing the Vulert playground, you can check if your application is affected by CVE-2025-21819 without needing to sign up.
The primary impact is system instability, leading to hangs and unresponsiveness, which can disrupt user activities and potentially lead to data loss.
Yes, updating the Linux kernel to the latest version that includes the patch for this vulnerability is the permanent fix.
If an immediate update is not possible, disconnecting one of the eDP panels can serve as a temporary workaround to avoid system hangs.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
