CVE-2025-37967
Medium
Description
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix deadlock This patch introduces the ucsi_con_mutex_lock / ucsi_con_mutex_unlock functions to the UCSI driver. ucsi_con_mutex_lock ensures the connector mutex is only locked if a connection is established and the partner pointer is valid. This resolves a deadlock scenario where ucsi_displayport_remove_partner holds con->mutex waiting for dp_altmode_work to complete while dp_altmode_work attempts to acquire it.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Linux Kernel
PublishedMay 20, 2025
First seenMay 20, 2025
Weakness typeCWE-667CWE-667
How to fix
Update
- linux linux_kernel5.15.184, 6.1.140, 6.6.92, 6.12.30, 6.14.7 or later
Patches
- git.kernel.org/stable/c/364618c89d4c57c85e5fc51a2446cd939bf57802
- git.kernel.org/stable/c/5924b324468845fc795bd76f588f51d7ab4f202d
- git.kernel.org/stable/c/61fc1a8e1e10cc784cab5829930838aaf1d37af5
- git.kernel.org/stable/c/962ce9028ca6eb450d5c205238a3ee27de9d214d
- git.kernel.org/stable/c/f32451ca4cb7dc53f2a0e2e66b84d34162747eb7
- git.kernel.org/stable/c/f4bd982563c2fd41ec9ca6c517c392d759db801c
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 5.2 ≤ v < 5.15.184, 5.16 ≤ v < 6.1.140, 6.2 ≤ v < 6.6.92, 6.7 ≤ v < 6.12.30, 6.13 ≤ v < 6.14.7, 6.15 | 5.15.184, 6.1.140, 6.6.92, 6.12.30, 6.14.7 |
| debian debian_linux | 11.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.