Home

Description

In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: Don't block input queue by waiting MSC Currently gsm_queue() processes incoming frames and when opening a DLC channel it calls gsm_dlci_open() which calls gsm_modem_update(). If basic mode is used it calls gsm_modem_upd_via_msc() and it cannot block the input queue by waiting the response to come into the same input queue. Instead allow sending Modem Status Command without waiting for remote end to respond. Define a new function gsm_modem_send_initial_msc() for this purpose. As MSC is only valid for basic encoding, it does not do anything for advanced or when convergence layer type 2 is used.

PUBLISHED Reserved 2025-04-16 | Published 2025-10-28 | Updated 2025-10-28 | Assigner Linux

Product status

Default status
unaffected

48473802506d2d6151f59e0e764932b33b53cb3b (git) before c36785f9de03df56ff9b8eca30fa681a12b2310d
affected

48473802506d2d6151f59e0e764932b33b53cb3b (git) before 5416e89b81b00443cb03c88df8da097ae091a141
affected

48473802506d2d6151f59e0e764932b33b53cb3b (git) before c5a2791a7f11939f05f95c01f0aec0c55bbf28d5
affected

48473802506d2d6151f59e0e764932b33b53cb3b (git) before 3cf0b3c243e56bc43be560617416c1d9f301f44c
affected

920e849b7d23ced84c9d11e11e2449e34973cfb8 (git)
affected

e83b4e1540469babeffcfd44a605cf8a61542598 (git)
affected

Default status
affected

5.18
affected

Any version before 5.18
unaffected

6.6.112 (semver)
unaffected

6.12.53 (semver)
unaffected

6.17.3 (semver)
unaffected

6.18-rc1 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/c36785f9de03df56ff9b8eca30fa681a12b2310d

git.kernel.org/...c/5416e89b81b00443cb03c88df8da097ae091a141

git.kernel.org/...c/c5a2791a7f11939f05f95c01f0aec0c55bbf28d5

git.kernel.org/...c/3cf0b3c243e56bc43be560617416c1d9f301f44c

cve.org (CVE-2025-40071)

nvd.nist.gov (CVE-2025-40071)

Download JSON