CVE-2025-38404

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: displayport: Fix potential deadlock

The deadlock can occur due to a recursive lock acquisition of `cros_typec_altmode_data::mutex`. The call chain is as follows: 1. cros_typec_altmode_work() acquires the mutex 2. typec_altmode_vdm() -> dp_altmode_vdm() -> 3. typec_altmode_exit() -> cros_typec_altmode_exit() 4. cros_typec_altmode_exit() attempts to acquire the mutex again

To prevent this, defer the `typec_altmode_exit()` call by scheduling it rather than calling it directly from within the mutex-protected context.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

VendorProductVersions
LinuxLinux>= e0359c66c1beccbe90119a63391678eabda38007, < 749d9076735fb497aae60fbea9fff563f9ea3254; >= e3fb6c2c3939b4aad203cacdd613a62ce1fd032c, < eb08fca56f1f39e4038cb9bac9864464b13b00aa; >= 56846793f105cf2b39ecbde4f3ae86342091f6fc, < 7be0d1ea71f52595499da39cea484a895e8ed042; >= 8e8a69b1f8c59f0505f8a1c0fb77191f27b75011, < 76cf1f33e7319fe74c94ac92f9814094ee8cc84b; >= 8851e40587013db00b71d4aeaae30f5fd59b0eec, < 63cff9f57e86b2dc25d7487ca0118df89a665296; >= 10cc2cfd3e5d0e0ec7590c4bee8bcea10e5492c4, < c782f98eef14197affa8a7b91e6981420f109ea9; >= 8f6a4fa7b663468bb304cb885b93326e025ae005, < 80c25d7916a44715338d4f8924c8e52af50d0b9f; >= b4b38ffb38c91afd4dc387608db26f6fc34ed40b, < 099cf1fbb8afc3771f408109f62bdec66f85160e
LinuxLinux>= 6.1.143, < 6.1.144; >= 6.6.96, < 6.6.97; >= 6.12.36, < 6.12.37; >= 6.15.5, < 6.15.6

References

Timeline

Published
Jul 25, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-384055.5In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak of bio integrity If nvmet receives commands witCVE-2025-384065.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: remove WARN on bad firmware input If the firmware gives CVE-2025-384075.5In the Linux kernel, the following vulnerability has been resolved: riscv: cpu_ops_sbi: Use static array for boot_data Since commit 6b9f29CVE-2025-384085.5In the Linux kernel, the following vulnerability has been resolved: genirq/irq_sim: Initialize work context pointers properly Initialize `CVE-2025-384095.5In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix another leak in the submit error path put_unused_fd() doeCVE-2025-38419.8A vulnerability, which was classified as problematic, was found in wix-incubator jam up to e87a6fd85cf8fb5ff37b62b2d68f917219d07ae9. This afCVE-2025-384105.5In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix a fence leak in submit error path In error paths, we coulCVE-2025-384117.8In the Linux kernel, the following vulnerability has been resolved: netfs: Fix double put of request If a netfs request finishes during thCVE-2025-384125.5In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs caCVE-2025-384135.5In the Linux kernel, the following vulnerability has been resolved: virtio-net: xsk: rx: fix the frame's length check When calling buf_to_CVE-2025-384145.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 GCC_GCC_CVE-2025-384157.8In the Linux kernel, the following vulnerability has been resolved: Squashfs: check return result of sb_min_blocksize Syzkaller reports an
CVE-2025-38404: Medium severity, CVSS 5.5 | Vulnix