Linux Kernel Deadlock Vulnerability in Type-C DisplayPort Functionality

CVE-2025-38404

What is CVE-2025-38404?

A deadlock issue has been identified in the Linux kernel related to the Type-C DisplayPort functionality. This vulnerability arises from a recursive lock acquisition of the cros_typec_altmode_data::mutex, potentially compromising system stability. The issue occurs when the cros_typec_altmode_work() function acquires the mutex, leading to a deadlock when cros_typec_altmode_exit() attempts to reacquire the same mutex within the callback hierarchy. To mitigate the issue, it is recommended to defer the typec_altmode_exit() operation by scheduling it rather than executing it directly, thereby ensuring smooth and secure operation of Type-C DisplayPort functionalities.

References