Vulnerability Database

318,756

Total vulnerabilities in the database

CVE-2025-38404

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: displayport: Fix potential deadlock

The deadlock can occur due to a recursive lock acquisition of cros_typec_altmode_data::mutex. The call chain is as follows:

  1. cros_typec_altmode_work() acquires the mutex
  2. typec_altmode_vdm() -> dp_altmode_vdm() ->
  3. typec_altmode_exit() -> cros_typec_altmode_exit()
  4. cros_typec_altmode_exit() attempts to acquire the mutex again

To prevent this, defer the typec_altmode_exit() call by scheduling it rather than calling it directly from within the mutex-protected context.

  • Published: Jul 25, 2025
  • Updated: Dec 24, 2025
  • CVE: CVE-2025-38404
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
linux / linux_kernel 6.1.143 6.1.143.x
linux / linux_kernel 6.6.96 6.6.96.x
linux / linux_kernel 6.12.36 6.12.36.x
linux / linux_kernel 6.15.5 6.15.5.x
linux / linux_kernel 6.16-rc1 6.16-rc1.x
linux / linux_kernel 6.16-rc2 6.16-rc2.x
linux / linux_kernel 6.16-rc3 6.16-rc3.x
linux / linux_kernel 6.16-rc4 6.16-rc4.x
debian / debian_linux 11.0 11.0.x