Wind River Support Network

HomeDefectsLIN1024-10588
Fixed

LIN1024-10588 : Security Advisory - linux - CVE-2025-38404

Created: Jul 28, 2025    Updated: Aug 10, 2025
Resolved Date: Aug 10, 2025
Found In Version: 10.24.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:EOL][EOL]usb: typec: displayport: Fix potential deadlock[EOL][EOL]The deadlock can occur due to a recursive lock acquisition of[EOL]`cros_typec_altmode_data::mutex`.[EOL]The call chain is as follows:[EOL]1. cros_typec_altmode_work() acquires the mutex[EOL]2. typec_altmode_vdm() -> dp_altmode_vdm() ->[EOL]3. typec_altmode_exit() -> cros_typec_altmode_exit()[EOL]4. cros_typec_altmode_exit() attempts to acquire the mutex again[EOL][EOL]To prevent this, defer the `typec_altmode_exit()` call by scheduling[EOL]it rather than calling it directly from within the mutex-protected[EOL]context.

CREATE(Triage):(User=admin) [CVE-2025-38404 (https://nvd.nist.gov/vuln/detail/CVE-2025-38404)

CVEs


Live chat
Online