Race Condition in Lenovo Yoga Tab 2 Pro Fast Charger Component

CVE-2025-21685

Summary

A race condition exists in the 'yt2_1380_fc_serdev_probe()' function of the Lenovo Yoga Tab 2 Pro's fast charger component, where the function calls 'devm_serdev_device_open()' prior to setting the client operations via 'serdev_device_set_client_ops()'. This improper sequencing can lead to a NULL pointer dereference in the receive_buf handler of the serdev controller, resulting in potential system instability. The vulnerability is akin to a previous issue addressed in related bugs, where device initialization was insufficient before enabling critical operations. To mitigate this vulnerability, the fix ensures that client operations are properly configured before enabling the device port.

References