PT-2025-28988 · Linux+5 · Linux Kernel+5
Anubis
·
Published
2025-05-06
·
Updated
2026-03-06
·
CVE-2025-38268
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Linux Kernel (affected versions not specified)
Description:
A vulnerability exists in the Linux kernel related to the handling of DisplayPort Alt Mode. A previous state check in
tcpm queue vdm unlocked could lead to a deadlock situation where the DisplayPort Alt Mode driver and the TCPM (Type-C Port Manager) would contend for a lock, blocking the driver's cancellation process. This occurs because the state check wasn't protected, creating a window where the Alt Mode driver could attempt to acquire the lock while the TCPM was also attempting to acquire it, resulting in a deadlock. The issue has been addressed by moving tcpm queue vdm unlocked to an asynchronous work queue (tcpm queue vdm work), allowing the state check to be performed while holding the TCPM lock without the Alt Mode lock being held simultaneously. This requires a new structure, altmode vdm event, to store the VDM (Video Data Management) data.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Linuxmint
Red Os
Suse
Ubuntu