Log in Start free

Vulnerability · Published Jul 25, 2025 · Assigned by Linux

CVE-2025-38404usb: typec: displayport: Fix potential deadlock

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 95.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: usb: typec: displayport: Fix potential deadlock The deadlock can occur due to a recursive lock acquisition of `cros_typec_altmode_data::mutex`. The call chain is as follows: 1. cros_typec_altmode_work() acquires the mutex 2. typec_altmode_vdm() -> dp_altmode_vdm() -> 3. typec_altmode_exit() -> cros_typec_altmode_exit() 4. cros_typec_altmode_exit() attempts to acquire the mutex again To prevent this, defer the `typec_altmode_exit()` call by scheduling it rather than calling it directly from within the mutex-protected context.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.147-1DEBIAN-CVE-2025-38404
Debian:13linux6.12.37-1DEBIAN-CVE-2025-38404
Debian:14linux6.12.37-1DEBIAN-CVE-2025-38404
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-38404
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-38404
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-38404
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-38404
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-38404
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-38404
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-38404
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-38404
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-38404

Affected products (as reported)

VendorProductVersions
Linux Linux e0359c66c1beccbe90119a63391678eabda38007 – before 749d9076735fb497aae60fbea9fff563f9ea3254e3fb6c2c3939b4aad203cacdd613a62ce1fd032c – before eb08fca56f1f39e4038cb9bac9864464b13b00aa56846793f105cf2b39ecbde4f3ae86342091f6fc – before 7be0d1ea71f52595499da39cea484a895e8ed0428e8a69b1f8c59f0505f8a1c0fb77191f27b75011 – before 76cf1f33e7319fe74c94ac92f9814094ee8cc84b8851e40587013db00b71d4aeaae30f5fd59b0eec – before 63cff9f57e86b2dc25d7487ca0118df89a66529610cc2cfd3e5d0e0ec7590c4bee8bcea10e5492c4 – before c782f98eef14197affa8a7b91e6981420f109ea98f6a4fa7b663468bb304cb885b93326e025ae005 – before 80c25d7916a44715338d4f8924c8e52af50d0b9fb4b38ffb38c91afd4dc387608db26f6fc34ed40b – before 099cf1fbb8afc3771f408109f62bdec66f85160e
Linux Linux 6.1.143 – before 6.1.1446.6.96 – before 6.6.976.12.36 – before 6.12.376.15.5 – before 6.15.6

References