ThreatCluster

Deadlock Fixes for USB Drivers CVE-2025-37967 and CVE-2025-37812

First seen 18 Feb 2026, 09:15 UTC Api.Msrc.Microsoft 51

Article Content

Browse articles
ThreatCluster

Two vulnerabilities in USB drivers have been addressed, specifically CVE-2025-37967 and CVE-2025-37812. CVE-2025-37967 affects the UCSI DisplayPort implementation, while CVE-2025-37812 pertains to the CDNS3 driver, both of which could lead to deadlocks. Users of affected systems should apply the fixes to mitigate potential issues.

Timeline

2025-05-08
CVE-2025-37812 published
2025-05-20
CVE-2025-37967 published
2026-02-18
Information published on deadlock fixes