USB: wdm: close race between wdm_open and wdm_wwan_port_stop
Published May 20, 2025
4.7
MEDIUMCVSS 3.1
EPSS 0.13%
Description
Clearing WDM_WWAN_IN_USE must be the last action or we can open a chardev whose URBs are still poisoned
Affected products
-
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version
-
- Version 5.14StatusaffectedConstraints-
- Version 0StatusunaffectedConstraints<5.14
- Version 5.15.181StatusunaffectedConstraints<=5.15.*
- Version 6.1.136StatusunaffectedConstraints<=6.1.*
- Version 6.12.26StatusunaffectedConstraints<=6.12.*
- Version 6.14.5StatusunaffectedConstraints<=6.14.*
- Version 6.15StatusunaffectedConstraints<=*
- Version 6.6.89StatusunaffectedConstraints<=6.6.*
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Linux | Linux | unaffected |
| |||||||||||||||||||||||||||
| Linux | Linux | affected |
|
Configuration 1
- ≥ 5.14 · < 5.15.181
- ≥ 5.16 · < 6.1.136
- ≥ 6.2 · < 6.6.89
- ≥ 6.7 · < 6.12.26
- ≥ 6.13 · < 6.14.5
- 6.15
- 6.15
- 6.15
Configuration 2
- 11.0
No data.
Red Hat Enterprise Linux 10
kernel
Fix deferred
Red Hat Enterprise Linux 6
kernel
Out of support scope
Red Hat Enterprise Linux 7
kernel
Out of support scope
Red Hat Enterprise Linux 7
kernel-rt
Out of support scope
Red Hat Enterprise Linux 8
kernel
Not affected
Red Hat Enterprise Linux 8
kernel-rt
Not affected
Red Hat Enterprise Linux 9
kernel
Fix deferred
Red Hat Enterprise Linux 9
kernel-rt
Fix deferred
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Fix deferred | n/a |
| Red Hat Enterprise Linux 6 | kernel | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | kernel | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Out of support scope | n/a |
| Red Hat Enterprise Linux 8 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Fix deferred | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
The bug actual only if WMC Device Management functionality being used (that is for the cell phones compliant to the CDC WMC specification). It is about possibility of incorrect access to the device (can access after release of the device). It doesn't lead to kernel crash or other possibilities of attack, so the security impact is limited.
Red Hat mitigation
To mitigate this issue, prevent module cdc-wdm from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.
References (13)
- https://access.redhat.com/security/cve/CVE-2025-37985 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2367617 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-15879 Advisory
- https://git.kernel.org/stable/c/217fe1fc7d112595a793e02b306710e702eac492 Patch
- https://git.kernel.org/stable/c/52ae15c665b5fe5876655aaccc3ef70560b0e314 Patch
- https://git.kernel.org/stable/c/54f7f8978af19f899dec80bcc71c8d4855dfbd72 Patch
- https://git.kernel.org/stable/c/b02a3fef3e8c8fe5a0a266f7a14f38cc608fb167 Patch
- https://git.kernel.org/stable/c/c1846ed4eb527bdfe6b3b7dd2c78e2af4bf98f4f Patch
- https://git.kernel.org/stable/c/e3c9adc69357fcbe6253a2bc2588ee4bbaaedbe9 Patch
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html Third Party Advisory
- https://lore.kernel.org/linux-cve-announce/2025052037-CVE-2025-37985-1b43@gregkh/T
- https://nvd.nist.gov/vuln/detail/CVE-2025-37985
- https://www.cve.org/CVERecord?id=CVE-2025-37985
Change history (0)
No recorded changes yet.