CVE-2025-37985

Katalog CVE

CVSS 4.7 · Medium EPSS 0,13%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel, debian linux. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: USB: wdm: close race between wdm_open and wdm_wwan_port_stop Clearing WDM_WWAN_IN_USE must be the last action or we can open a chardev whose URBs are still poisoned

Rincian

Terbit di NVD

20 Mei 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,13% peluang dieksploitasi; lebih tinggi dari 2,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/217fe1fc7d112595a793e02b306710e702eac492 patch
• https://git.kernel.org/stable/c/52ae15c665b5fe5876655aaccc3ef70560b0e314 patch
• https://git.kernel.org/stable/c/54f7f8978af19f899dec80bcc71c8d4855dfbd72 patch
• https://git.kernel.org/stable/c/b02a3fef3e8c8fe5a0a266f7a14f38cc608fb167 patch
• https://git.kernel.org/stable/c/c1846ed4eb527bdfe6b3b7dd2c78e2af4bf98f4f patch
• https://git.kernel.org/stable/c/e3c9adc69357fcbe6253a2bc2588ee4bbaaedbe9 patch
• https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html advisory pihak ketiga