Race Condition in TTY Wakeup in Linux Kernel USB Gadget

CVE-2025-38448

What is CVE-2025-38448?

In the Linux kernel, a vulnerability has been identified in the USB gadget subsystem, specifically in the TTY wakeup process. This issue arises from a race condition during the execution of gs_start_io() which interacts with gs_start_rx() or gs_start_tx(). The port_lock is briefly released, allowing operations such as gs_close() and gserial_disconnect() to invalidate the TTY's port context. Utilizing a null-safe TTY Port helper function is recommended for synchronizing TTY wakeup, thereby preventing potential null pointer exceptions.

References