CVE-2025-37812 usb: cdns3: Fix deadlock when using NCM gadget

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Deadlock Fixes for USB Drivers CVE-2025-37967 and CVE-2025-37812 Two vulnerabilities in USB drivers have been addressed, specifically CVE-2025-37967 and CVE-2025-37812. CVE-2025-37967 affects the UCSI DisplayPort implementation, while CVE-2025-37812 pertains to the CDNS3 driver, both of which could lead to deadlocks. Users of affected systems should apply the fixes to mitigate potential issues. 5 sources 51