CVE-2025-38268

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work

A state check was previously added to tcpm_queue_vdm_unlocked to

prevent a deadlock where the DisplayPort Alt Mode driver would be

executing work and attempting to grab the tcpm_lock while the TCPM

was holding the lock and attempting to unregister the altmode, blocking

on the altmode driver's cancel_work_sync call.

Because the state check isn't protected, there is a small window

where the Alt Mode driver could determine that the TCPM is

in a ready state and attempt to grab the lock while the

TCPM grabs the lock and changes the TCPM state to one that

causes the deadlock. The callstack is provided below:

[110121.667392][ C7] Call trace:

[110121.667396][ C7] __switch_to+0x174/0x338

[110121.667406][ C7] __schedule+0x608/0x9f0

[110121.667414][ C7] schedule+0x7c/0xe8

[110121.667423][ C7] kernfs_drain+0xb0/0x114

[110121.667431][ C7]

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References