CVE-2025-38448

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists when gs start io() calls either gs start rx() or gs start tx(), as these functions briefly release the port lock for usb ep queue(). This allows gs close() and gserial disconnect() to clear port.tty and port usb, respectively. The issue is addressed by utilizing a null-safe TTY Port helper function to wake up the TTY. The race condition occurs when CPU1 executes gserial connect() and CPU2 executes gs close() concurrently, potentially leading to a null pointer exception (NPE).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.