Log in Start free

Vulnerability · Published Oct 28, 2025 · Assigned by Linux

CVE-2025-40071tty: n_gsm: Don't block input queue by waiting MSC

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 90.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: Don't block input queue by waiting MSC Currently gsm_queue() processes incoming frames and when opening a DLC channel it calls gsm_dlci_open() which calls gsm_modem_update(). If basic mode is used it calls gsm_modem_upd_via_msc() and it cannot block the input queue by waiting the response to come into the same input queue. Instead allow sending Modem Status Command without waiting for remote end to respond. Define a new function gsm_modem_send_initial_msc() for this purpose. As MSC is only valid for basic encoding, it does not do anything for advanced or when convergence layer type 2 is used.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2025-40071
Debian:13linux6.12.57-1DEBIAN-CVE-2025-40071
Debian:14linux6.17.6-1DEBIAN-CVE-2025-40071
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux6.8.0-106.106UBUNTU-CVE-2025-40071
Ubuntu:25.10linux6.17.0-14.14USN-8029-1
Ubuntu:25.10linux6.17.0-14.14UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-aws6.8.0-1050.53UBUNTU-CVE-2025-40071
Ubuntu:25.10linux-aws6.17.0-1007.7UBUNTU-CVE-2025-40071
Ubuntu:25.10linux-aws6.17.0-1007.7USN-8029-2
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-aws-6.176.17.0-1007.7~24.04.1UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1050.53~22.04.1UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-azure6.8.0-1051.57UBUNTU-CVE-2025-40071
Ubuntu:25.10linux-azure6.17.0-1008.8USN-8029-3
Ubuntu:25.10linux-azure6.17.0-1008.8UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1051.57~22.04.1UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1058.65UBUNTU-CVE-2025-40071
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1058.65~22.04.1UBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-gcp6.8.0-1052.55UBUNTU-CVE-2025-40071
Ubuntu:25.10linux-gcp6.17.0-1007.7USN-8030-1
Ubuntu:25.10linux-gcp6.17.0-1007.7UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1008.8~24.04.1UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1052.55~22.04.1UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-gke6.8.0-1048.53UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1035.38UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-106.106~22.04.1UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-ibm6.8.0-1049.49UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1049.49~22.04.1UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-106.106.1UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-106.106.1~22.04.1UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1049.52UBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-nvidia-6.176.17.0-1008.8UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1049.52~22.04.1UBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1049.52.1UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1020.20UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1011.11UBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1011.11USN-8048-1
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-oracle6.8.0-1047.48UBUNTU-CVE-2025-40071
Ubuntu:25.10linux-oracle6.17.0-1007.7USN-8029-2
Ubuntu:25.10linux-oracle6.17.0-1007.7UBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1007.7~24.04.1UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1047.48~22.04.1UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-raspi6.8.0-1050.54UBUNTU-CVE-2025-40071
Ubuntu:25.10linux-raspi6.17.0-1008.8USN-8029-1
Ubuntu:25.10linux-raspi6.17.0-1008.8UBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-40071
Ubuntu:25.10linux-realtime6.17.0-1006.7USN-8029-1
Ubuntu:25.10linux-realtime6.17.0-1006.7UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-40071
Ubuntu:25.10linux-riscv6.17.0-14.14.1UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-106.106~22.04.1UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-40071
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1028.29UBUNTU-CVE-2025-40071
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2025-40071

Affected products (as reported)

VendorProductVersions
Linux Linux 48473802506d2d6151f59e0e764932b33b53cb3b – before 8fcc22d6b90304d8b7436e101562218ea3faf73b48473802506d2d6151f59e0e764932b33b53cb3b – before c36785f9de03df56ff9b8eca30fa681a12b2310d48473802506d2d6151f59e0e764932b33b53cb3b – before 5416e89b81b00443cb03c88df8da097ae091a14148473802506d2d6151f59e0e764932b33b53cb3b – before c5a2791a7f11939f05f95c01f0aec0c55bbf28d548473802506d2d6151f59e0e764932b33b53cb3b – before 3cf0b3c243e56bc43be560617416c1d9f301f44c920e849b7d23ced84c9d11e11e2449e34973cfb8e83b4e1540469babeffcfd44a605cf8a615425985.15.54 – before 5.16
Linux Linux 5.18

References