cve/2025/CVE-2025-38404.md
2025-09-29 21:09:30 +02:00

2.2 KiB

CVE-2025-38404

Description

In the Linux kernel, the following vulnerability has been resolved:usb: typec: displayport: Fix potential deadlockThe deadlock can occur due to a recursive lock acquisition ofcros_typec_altmode_data::mutex.The call chain is as follows:1. cros_typec_altmode_work() acquires the mutex2. typec_altmode_vdm() -> dp_altmode_vdm() ->3. typec_altmode_exit() -> cros_typec_altmode_exit()4. cros_typec_altmode_exit() attempts to acquire the mutex againTo prevent this, defer the typec_altmode_exit() call by schedulingit rather than calling it directly from within the mutex-protectedcontext.

POC

Reference

No PoCs from references.

Github