
Cloud Vulnerability DB
A community-led vulnerabilities database
A race condition vulnerability was identified in the Linux kernel's hibernation functionality that could lead to a deadlock scenario. The issue involves the probe_count variable during device probing when resuming from hibernation, discovered and disclosed on June 18, 2025 (NVD).
The vulnerability occurs when waitfordeviceprobe() from snapshotopen() from miscopen() can sleep indefinitely while holding miscmtx if probecount cannot become 0. The probecount variable is incremented before a device probe function starts and decremented after it completes. A deadlock can occur when a process holding both systemtransitionmutex and miscmtx waits for probecount to become 0, while the probe function waits for processes blocked at mutexlock(&miscmtx) to respond via the /dev/raw-gadget interface (NVD, Wiz).
The vulnerability can result in a system hang due to deadlock conditions. This can occur in three scenarios: when a device being probed stops responding, when a process emulating a USB device via /dev/raw-gadget interface stops responding, or when new device probe requests keep coming before existing ones complete (NVD).
The issue has been patched by deferring waitfordeviceprobe() from snapshotopen() to snapshotwrite() and snapshotioctl(). However, the possibility of deadlock remains if threads emulating USB devices via /dev/raw-gadget can be blocked by uninterruptible blocking operations (NVD).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."