PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()

{
  "id": "c9ddc3baee6eb38500faefb32684372e35b753feeb9c3a1ad569b5ab249b60f8",
  "url": "https://osv.dev/vulnerability/CVE-2025-37745",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() syzbot reported a deadlock in lock_system_sleep() (see below). The write operation to \"/sys/module/hibernate/parameters/compressor\" conflicts with the registration of ieee80211 device, resulting in a deadlock when attempting to acquire system_transition_mutex under param_lock. To avoid this deadlock, change hibernate_compressor_param_set() to use mutex_trylock() for attempting to acquire system_transition_mutex and return -EBUSY when it fails. Task flags need not be saved or adjusted before calling mutex_trylock(&system_transition_mutex) because the caller is not going to end up waiting for this mutex and if it runs concurrently with system suspend in progress, it will be frozen properly when it returns to user space. syzbot report: syz-executor895/5833 is trying to acquire lock: ffffffff8e0828c8 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 kernel/power/main.c:56 but task is already holding lock: ffffffff8e07dc68 (param_lock){+.+.}-{4:4}, at: kernel_param_lock kernel/params.c:607 [inline] ffffffff8e07dc68 (param_lock){+.+.}-{4:4}, at: param_attr_store+0xe6/0x300 kernel/params.c:586 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #3 (param_lock){+.+.}-{4:4}: __mutex_lock_common kernel/locking/mutex.c:585 [inline] __mutex_lock+0x19b/0xb10 kernel/locking/mutex.c:730 ieee",
    "evidence": "osv:CVE-2025-37745",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.12.24",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.13.12",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.14.3",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2025-37745",
      "aliases": [
        "CVE-2025-37745"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "3fec6e5961b77af6a952b77f5c2ea26f7513b216"
                },
                {
                  "fixed": "11ae4fec1f4b4ee06770a572c37d89cbaecbf66e"
                },
                {
                  "fixed": "6dbaa8583af74814a5aae03a337cb1722c414808"
                },
                {
                  "fixed": "3b2c3806ef4253595dfcb8b58352cfab55c9bfb0"
                },
                {
                  "fixed": "52323ed1444ea5c2a5f1754ea0a2d9c8c216ccdf"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37745.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.9.0"
                },
                {
                  "fixed": "6.12.24"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.13.0"
                },
                {
                  "fixed": "6.13.12"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.14.0"
                },
                {
                  "fixed": "6.14.3"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37745.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:22.792221163Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/11ae4fec1f4b4ee06770a572c37d89cbaecbf66e",
        "https://git.kernel.org/stable/c/3b2c3806ef4253595dfcb8b58352cfab55c9bfb0",
        "https://git.kernel.org/stable/c/52323ed1444ea5c2a5f1754ea0a2d9c8c216ccdf",
        "https://git.kernel.org/stable/c/6dbaa8583af74814a5aae03a337cb1722c414808",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37745.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-37745",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37745.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-37745",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 488934,
  "published_at": "2025-05-01T12:55:52.679+00:00"
}