Critical PCIe Root Port Vulnerability in Linux Package: linux - System Hang on TUXEDO Sirius Gen 1
Summary
DEBIAN-CVE-2025-21831: In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 commit 9d26d3a8f1b0 ("PCI: Put PCIe ports into D3 during suspend") sets the policy that... Affects linux versions < 6.12.15-1. Fixed in 6.12.15-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The 'linux' package is the core of the Debian operating system, providing essential functionalities and services for hardware interaction and system operations. It is responsible for managing system resources, hardware communication, and overall system stability. This package is crucial for the performance and reliability of Debian systems, particularly in handling power management for PCIe ports.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to PCIe root ports, specifically affecting the TUXEDO Sirius 16 Gen 1 with an outdated BIOS. The issue arises when the system is suspended, leading to a policy that allows all PCIe ports to enter D3hot state. This can cause the system to hang upon wakeup due to the incompatibility of the BIOS with the power management policy. The vulnerability was introduced in commit 9d26d3a8f1b0, which set the policy for PCIe ports during suspend, resulting in potential system instability.
How To Fix
Minimum fixed version
6.12.15-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users experiencing issues with wakeup from suspend on the TUXEDO Sirius 16 Gen 1 can avoid putting the affected root ports into D3hot by modifying the system's power management settings or using a different BIOS version that is compatible with the current power management policy.
Conclusion
The vulnerability in the Linux kernel related to PCIe root ports poses a significant risk for TUXEDO Sirius 16 Gen 1 systems, leading to potential system hangs during wakeup from suspend. Users are advised to update their 'linux' package to the latest patched version to mitigate this risk. Temporary workarounds are available, but a permanent fix is recommended for long-term stability.
See every vulnerability recorded for linux →
FAQ
The vulnerability primarily affects the TUXEDO Sirius 16 Gen 1 systems with specific old BIOS versions.
The main symptom is a system hang when attempting to wake the system from suspend mode.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Yes, updating the 'linux' package to version 6.12.15-1 or later will permanently fix the vulnerability.
Vulert monitors and alerts for open-source vulnerabilities in software using a manifest file like package-lock.json. It provides real-time alerts without requiring code access or installation.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
