PT-2025-30862 · Linux+5 · Linux Kernel+5
Published
2025-01-01
·
Updated
2026-04-20
·
CVE-2025-38448
CVSS v2.0
4.9
Medium
| Vector | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A race condition exists when
gs start io() calls either gs start rx() or gs start tx(), as these functions briefly release the port lock for usb ep queue(). This allows gs close() and gserial disconnect() to clear port.tty and port usb, respectively. The issue is addressed by utilizing a null-safe TTY Port helper function to wake up the TTY. The race condition occurs when CPU1 executes gserial connect() and CPU2 executes gs close() concurrently, potentially leading to a null pointer exception (NPE).Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu