IRQ1 Wakeup Source Management Vulnerability in Linux Kernel
Summary
CVE-2025-21645: In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it Wakeup for IRQ1 should be disabled only in cases where i8042 had actually... Affects linux versions < 6.1.140-1. Fixed in 6.1.140-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interactions. It is known for its robustness and flexibility, supporting a wide range of hardware architectures. However, it is susceptible to vulnerabilities that can affect system stability and security. This specific vulnerability relates to the handling of IRQ1 wakeup sources, which can lead to system warnings and potential instability during power management operations.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the handling of IRQ1 wakeup sources, specifically within the PMC driver and i8042 driver interactions. The issue arises when IRQ1 wakeup is disabled without confirming that i8042 had enabled it. This can cause the 'wake_depth' for IRQ1 to drop below zero, leading to system warnings such as 'Unbalanced IRQ 1 wake disable'. The vulnerability can be triggered during hibernation (S4) after a fresh boot, potentially resulting in system instability and log cluttering with warning messages.
How To Fix
Minimum fixed version
6.1.140-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid triggering the vulnerability by ensuring that the system is not hibernated immediately after a fresh boot without entering s2idle mode first. This can help prevent the warnings from being logged until a proper fix is applied.
Conclusion
The IRQ1 wakeup source management vulnerability in the Linux kernel poses a risk of system instability and log warnings during power management operations. Users are advised to update their kernel to the latest patched version to resolve this issue. In the meantime, following the provided workaround can help mitigate potential impacts until a fix is applied.
See every vulnerability recorded for linux →
FAQ
IRQ1 is an interrupt request line used by the keyboard controller. It is crucial for handling keyboard inputs and managing wakeup events from sleep states.
The vulnerability can lead to system warnings, instability during power management operations, and potential log cluttering, which may affect system performance.
You can use tools like Vulert, which monitors and alerts for open-source vulnerabilities in your software. Simply upload your manifest file to Vulert's playground to check for vulnerabilities.
Yes, users should update to the latest version of the Linux kernel where this vulnerability has been patched. Always refer to the official Debian repositories for the most recent updates.
If an immediate update is not possible, avoid hibernating the system after a fresh boot without entering s2idle mode first to mitigate the risk of triggering the vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
