Linux Kernel DisplayPort Deadlock Vulnerability in Type-C USB Handling

Vulnerability

A potential deadlock vulnerability has been identified in the Linux kernel's handling of DisplayPort over USB Type-C. This issue arises from a recursive acquisition of a mutex in the 'cros_typec_altmode_data' structure, leading to a deadlock scenario. The vulnerability occurs when the 'cros_typec_altmode_work()' function acquires the mutex, and then the 'typec_altmode_exit()' function attempts to reacquire it before the first acquisition is released. This vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability can lead to a deadlock condition, causing the system to hang or become unresponsive.

Remediation

The vulnerability has been addressed in the official Linux kernel repository. Users should upgrade to the latest version where this issue has been fixed.

Added: Jul 25, 2025, 5:40 PM
Updated: Jul 25, 2025, 5:40 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
3.5
remediation
0.0
relevance
0.3
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.