CVE-2025-37967: fallo en Linux
usb: typec: ucsi: displayport: Fix deadlock
Publicada el · Actualizada el
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 0.2%
probabilidad de explotación
0.2%top 95% de las CVE
explotación observada
noninguna fuente lo reporta
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: ucsi: displayport: Fix deadlock
This patch introduces the ucsi_con_mutex_lock / ucsi_con_mutex_unlock
functions to the UCSI driver. ucsi_con_mutex_lock ensures the connector
mutex is only locked if a connection is established and the partner pointer
is valid. This resolves a deadlock scenario where
ucsi_displayport_remove_partner holds con->mutex waiting for
dp_altmode_work to complete while dp_altmode_work attempts to acquire it.
Productos afectados
Linux · LinuxCVEs relacionadas — Linux
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 98.1%KEVCVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 3.3%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEVCVE-2025-39964HIGHcrypto: af_alg - Disallow concurrent writes in af_alg_sendmsgEPSS 1.6%KEV
Referencias
https://git.kernel.org/stable/c/364618c89d4c57c85e5fc51a2446cd939bf57802https://git.kernel.org/stable/c/5924b324468845fc795bd76f588f51d7ab4f202dhttps://git.kernel.org/stable/c/61fc1a8e1e10cc784cab5829930838aaf1d37af5https://git.kernel.org/stable/c/962ce9028ca6eb450d5c205238a3ee27de9d214dhttps://git.kernel.org/stable/c/f32451ca4cb7dc53f2a0e2e66b84d34162747eb7https://git.kernel.org/stable/c/f4bd982563c2fd41ec9ca6c517c392d759db801chttps://lists.debian.org/debian-lts-announce/2025/08/msg00010.html