Linux Kernel USB Component Vulnerability Impacting Device Operations

CVE-2025-37985

What is CVE-2025-37985?

The Linux Kernel contains a race condition vulnerability in the USB subsystem, specifically within the WDM (Wireless Device Management) component. This issue occurs during the concurrent operations of 'wdm_open' and 'wdm_wwan_port_stop', which can lead to unexpected behavior when trying to manage device resources. If the operation sequence is not handled properly, it can result in opening a character device (chardev) while its URBs (USB Request Blocks) remain compromised, potentially leading to system instability and unreliable device performance.

References