01 Record

CVE-2025-37812

usb: cdns3: Fix deadlock when using NCM gadget

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

usb: cdns3: Fix deadlock when using NCM gadget

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.15% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 4.6% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-05-08 06:26Z1 YR AGO

Last updated

2026-05-11 21:15Z3 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-667Improper LockingClass
CWE-833DeadlockBase

Data version

5.2

Document digest

c52963b06d207e7c3e9ccec3dd41ef9580cce820b758079ca377eb19b1e37cce

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux7733f6c32e36ff9d7adadf40001039bf219b1cbe to < eebfb64c624fc738b669100173344fb441c5e719, 7733f6c32e36ff9d7adadf40001039bf219b1cbe to < 59a760e4796a3cd88d8b9d7706e0a638de677751, 7733f6c32e36ff9d7adadf40001039bf219b1cbe to < b96239582531775f2fdcb14de29bdb6870fd4c8c, 7733f6c32e36ff9d7adadf40001039bf219b1cbe to < c27db84ed44e50ff90d9e3a2a25fae2e0a0fa015, 7733f6c32e36ff9d7adadf40001039bf219b1cbe to < 48a62deb857f0694f611949015e70ad194d97159, 7733f6c32e36ff9d7adadf40001039bf219b1cbe to < 74cd6e408a4c010e404832f0e4609d29bf1d0c41, 7733f6c32e36ff9d7adadf40001039bf219b1cbe to < 09e90a9689a4aac7a2f726dc2aa472b0b37937b7, 7733f6c32e36ff9d7adadf40001039bf219b1cbe to < a1059896f2bfdcebcdc7153c3be2307ea319501f, 5.4—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/eebfb64c624fc738b669100173344fb441c5e719
git.kernel.orghttps://git.kernel.org/stable/c/59a760e4796a3cd88d8b9d7706e0a638de677751
git.kernel.orghttps://git.kernel.org/stable/c/b96239582531775f2fdcb14de29bdb6870fd4c8c
git.kernel.orghttps://git.kernel.org/stable/c/c27db84ed44e50ff90d9e3a2a25fae2e0a0fa015
git.kernel.orghttps://git.kernel.org/stable/c/48a62deb857f0694f611949015e70ad194d97159
git.kernel.orghttps://git.kernel.org/stable/c/74cd6e408a4c010e404832f0e4609d29bf1d0c41
git.kernel.orghttps://git.kernel.org/stable/c/09e90a9689a4aac7a2f726dc2aa472b0b37937b7
git.kernel.orghttps://git.kernel.org/stable/c/a1059896f2bfdcebcdc7153c3be2307ea319501f
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html

01 Record index

CVE-2025-37812

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-37812

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References