You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve 2025 40071
About this tag
CVE-2025-40071 is a Linux kernel vulnerability in the n_gsm tty driver that can cause a deadlock when handling Modem Status Command (MSC) responses. The issue arises from a timing and protocol-handling error that hangs the input processing path, leading to system availability risks. A fix was applied in October to prevent the driver from waiting indefinitely for an MSC response. This vulnerability is relevant for systems using GSM multiplexing over serial connections, often found in embedded or industrial environments. Discussions on WindowsForum.com cover the technical details of the deadlock, the affected code in drivers/tty, and the implications for system stability.
A narrowly scoped but practically important fix landed in the Linux kernel this October to prevent the n_gsm tty driver from hanging the input processing path while it waits for a Modem Status Command (MSC) response — tracked as CVE-2025-40071 — and it exemplifies how small timing and...