CVE-2025-38404

usb: typec: displayport: Fix potential deadlock

MEDIUM
5.5
CVSS Score
Published: July 25, 2025 at 01:09 PM UTC
Updated: June 17, 2026 at 09:16 AM UTC
2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: usb: typec: displayport: Fix potential deadlock The deadlock can occur due to a recursive lock acquisition of `cros_typec_altmode_data::mutex`. The call chain is as follows: 1. cros_typec_altmode_work() acquires the mutex 2. typec_altmode_vdm() -> dp_altmode_vdm() -> 3. typec_altmode_exit() -> cros_typec_altmode_exit() 4. cros_typec_altmode_exit() attempts to acquire the mutex again To prevent this, defer the `typec_altmode_exit()` call by scheduling it rather than calling it directly from within the mutex-protected context.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.1.143 ≤ v < 6.1.1446.12.36 ≤ v < 6.12.376.15.5 ≤ v < 6.15.66.6.96 ≤ v < 6.6.9710cc2cfd3e5d0e0ec7590c4bee8bcea10e5492c456846793f105cf2b39ecbde4f3ae86342091f6fc6.1.1436.12.366.15.56.16 rc16.16 rc26.16 rc36.16 rc46.6.968851e40587013db00b71d4aeaae30f5fd59b0eec8e8a69b1f8c59f0505f8a1c0fb77191f27b750118f6a4fa7b663468bb304cb885b93326e025ae005b4b38ffb38c91afd4dc387608db26f6fc34ed40be0359c66c1beccbe90119a63391678eabda38007e3fb6c2c3939b4aad203cacdd613a62ce1fd032c
Vendor states this is fixed in 099cf1fbb8afc3771f408109f62bdec66f85160e (fixed)
Vendor states this is fixed in 63cff9f57e86b2dc25d7487ca0118df89a665296 (fixed)
Vendor states this is fixed in 749d9076735fb497aae60fbea9fff563f9ea3254 (fixed)
Vendor states this is fixed in 76cf1f33e7319fe74c94ac92f9814094ee8cc84b (fixed)
Vendor states this is fixed in 7be0d1ea71f52595499da39cea484a895e8ed042 (fixed)
Vendor states this is fixed in 80c25d7916a44715338d4f8924c8e52af50d0b9f (fixed)
Vendor states this is fixed in c782f98eef14197affa8a7b91e6981420f109ea9 (fixed)
Vendor states this is fixed in eb08fca56f1f39e4038cb9bac9864464b13b00aa (fixed)
Affected range stops below 6.1.144, so it looks safe — our inference, not a vendor statement
Affected range stops below 6.12.37, so it looks safe — our inference, not a vendor statement
Affected range stops below 6.15.6, so it looks safe — our inference, not a vendor statement
Affected range stops below 6.6.97, so it looks safe — our inference, not a vendor statement

References (10)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/099cf1fbb8afc3771f408109f62bdec66f85160e
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/63cff9f57e86b2dc25d7487ca0118df89a665296
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/749d9076735fb497aae60fbea9fff563f9ea3254
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/76cf1f33e7319fe74c94ac92f9814094ee8cc84b
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7be0d1ea71f52595499da39cea484a895e8ed042
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/80c25d7916a44715338d4f8924c8e52af50d0b9f
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c782f98eef14197affa8a7b91e6981420f109ea9
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/eb08fca56f1f39e4038cb9bac9864464b13b00aa

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-667

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card