CVE-2025-38448

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Fix race condition in TTY wakeup A race condition occurs when gs_start_io() calls either gs_start_rx() or gs_start_tx(), as those functions briefly drop the port_lock for usb_ep_queue(). This allows gs_close() and gserial_disconnect() to clear port.tty and port_usb, respectively. Use the null-safe TTY Port helper function to wake up TTY. Example CPU1: CPU2: gserial_connect() // lock gs_close() // await lock gs_start_rx() // unlock usb_ep_queue() gs_close() // lock, reset port.tty and unlock gs_start_rx() // lock tty_wakeup() // NPE

Reserved 2025-04-16 | Published 2025-07-25 | Updated 2025-07-25 | Assigner Linux

Product status

Default status
unaffected

35f95fd7f234d2b58803bab6f6ebd6bb988050a2 before 18d58a467ccf011078352d91b4d6a0108c7318e8
affected

35f95fd7f234d2b58803bab6f6ebd6bb988050a2 before d43657b59f36e88289a6066f15bc9a80df5014eb
affected

35f95fd7f234d2b58803bab6f6ebd6bb988050a2 before a5012673d49788f16bb4e375b002d7743eb642d9
affected

35f95fd7f234d2b58803bab6f6ebd6bb988050a2 before ee8d688e2ba558f3bb8ac225113740be5f335417
affected

35f95fd7f234d2b58803bab6f6ebd6bb988050a2 before c6eb4a05af3d0ba3bc4e8159287722fb9abc6359
affected

35f95fd7f234d2b58803bab6f6ebd6bb988050a2 before abf3620cba68e0e51e5c21054ce4f925f75b3661
affected

35f95fd7f234d2b58803bab6f6ebd6bb988050a2 before c8c80a3a35c2e3488409de2d5376ef7e662a2bf5
affected

35f95fd7f234d2b58803bab6f6ebd6bb988050a2 before c529c3730bd09115684644e26bf01ecbd7e2c2c9
affected

Default status
affected

3.5
affected

Any version before 3.5
unaffected

5.4.296
unaffected

5.10.240
unaffected

5.15.189
unaffected

6.1.146
unaffected

6.6.99
unaffected

6.12.39
unaffected

6.15.7
unaffected

6.16-rc5
unaffected

References

git.kernel.org/...c/18d58a467ccf011078352d91b4d6a0108c7318e8

git.kernel.org/...c/d43657b59f36e88289a6066f15bc9a80df5014eb

git.kernel.org/...c/a5012673d49788f16bb4e375b002d7743eb642d9

git.kernel.org/...c/ee8d688e2ba558f3bb8ac225113740be5f335417

git.kernel.org/...c/c6eb4a05af3d0ba3bc4e8159287722fb9abc6359

git.kernel.org/...c/abf3620cba68e0e51e5c21054ce4f925f75b3661

git.kernel.org/...c/c8c80a3a35c2e3488409de2d5376ef7e662a2bf5

git.kernel.org/...c/c529c3730bd09115684644e26bf01ecbd7e2c2c9

cve.org (CVE-2025-38448)

nvd.nist.gov (CVE-2025-38448)

Download JSON