CVE-2025-37967

Source
https://cve.org/CVERecord?id=CVE-2025-37967
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-37967.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-37967
Downstream
Related
Published
2025-05-20T16:47:15.473Z
Modified
2026-03-11T07:49:22.001791Z
Summary
usb: typec: ucsi: displayport: Fix deadlock
Details

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: ucsi: displayport: Fix deadlock

This patch introduces the ucsiconmutexlock / ucsiconmutexunlock functions to the UCSI driver. ucsiconmutexlock ensures the connector mutex is only locked if a connection is established and the partner pointer is valid. This resolves a deadlock scenario where ucsidisplayportremovepartner holds con->mutex waiting for dpaltmodework to complete while dpaltmodework attempts to acquire it.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37967.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
af8622f6a585d8d82b11cd7987e082861fd0edd3
Fixed
f4bd982563c2fd41ec9ca6c517c392d759db801c
Fixed
f32451ca4cb7dc53f2a0e2e66b84d34162747eb7
Fixed
962ce9028ca6eb450d5c205238a3ee27de9d214d
Fixed
5924b324468845fc795bd76f588f51d7ab4f202d
Fixed
61fc1a8e1e10cc784cab5829930838aaf1d37af5
Fixed
364618c89d4c57c85e5fc51a2446cd939bf57802

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-37967.json"