CVE-2025-38404

usb: typec: displayport: Fix potential deadlock

State
Published
Severity
Not scored
Published
Jul 25, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: displayport: Fix potential deadlock

The deadlock can occur due to a recursive lock acquisition of `cros_typec_altmode_data::mutex`. The call chain is as follows: 1. cros_typec_altmode_work() acquires the mutex 2. typec_altmode_vdm() -> dp_altmode_vdm() -> 3. typec_altmode_exit() -> cros_typec_altmode_exit() 4. cros_typec_altmode_exit() attempts to acquire the mutex again

To prevent this, defer the `typec_altmode_exit()` call by scheduling it rather than calling it directly from within the mutex-protected context.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e0359c66c1beccbe90119a63391678eabda38007 to before 749d9076735fb497aae60fbea9fff563f9ea3254Affected
  • e3fb6c2c3939b4aad203cacdd613a62ce1fd032c to before eb08fca56f1f39e4038cb9bac9864464b13b00aaAffected
  • 56846793f105cf2b39ecbde4f3ae86342091f6fc to before 7be0d1ea71f52595499da39cea484a895e8ed042Affected
  • 8e8a69b1f8c59f0505f8a1c0fb77191f27b75011 to before 76cf1f33e7319fe74c94ac92f9814094ee8cc84bAffected
  • 8851e40587013db00b71d4aeaae30f5fd59b0eec to before 63cff9f57e86b2dc25d7487ca0118df89a665296Affected
  • 10cc2cfd3e5d0e0ec7590c4bee8bcea10e5492c4 to before c782f98eef14197affa8a7b91e6981420f109ea9Affected
  • 8f6a4fa7b663468bb304cb885b93326e025ae005 to before 80c25d7916a44715338d4f8924c8e52af50d0b9fAffected
  • b4b38ffb38c91afd4dc387608db26f6fc34ed40b to before 099cf1fbb8afc3771f408109f62bdec66f85160eAffected
LinuxLinux
  • 6.1.143 to before 6.1.144Affected
  • 6.6.96 to before 6.6.97Affected
  • 6.12.36 to before 6.12.37Affected
  • 6.15.5 to before 6.15.6Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.