CVE-2025-37812

usb: cdns3: Fix deadlock when using NCM gadget

published May 8, 2025

CVSS
—
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

usb: cdns3: Fix deadlock when using NCM gadget

The cdns3 driver has the same NCM deadlock as fixed in cdnsp by commit

58f2fcb3a845 ("usb: cdnsp: Fix deadlock issue during using NCM gadget").

Under PREEMPT_RT the deadlock can be readily triggered by heavy network

traffic, for example using "iperf --bidir" over NCM ethernet link.

The deadlock occurs because the threaded interrupt handler gets

preempted by a softirq, but both are protected by the same spinlock.

Prevent deadlock by disabling softirq during threaded irq handler.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.1th percentile
Published
2025-05-08T06:26Z
EPSS history
Timeline
  • 08 MAY 06:26Z
    usb: cdns3: Fix deadlock when using NCM gadget
    cvelistv5