In the Linux kernel, the following vulnerability has been resolved:
usb: cdns3: Fix deadlock when using NCM gadget
The cdns3 driver has the same NCM deadlock as fixed in cdnsp by commit 58f2fcb3a845 ("usb: cdnsp: Fix deadlock issue during using NCM gadget").
Under PREEMPT_RT the deadlock can be readily triggered by heavy network traffic, for example using "iperf --bidir" over NCM ethernet link.
The deadlock occurs because the threaded interrupt handler gets preempted by a softirq, but both are protected by the same spinlock. Prevent deadlock by disabling softirq during threaded irq handler.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37812.json",
"cna_assigner": "Linux"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37812.json"
[
{
"id": "CVE-2025-37812-1a68dc0c",
"digest": {
"line_hashes": [
"66402445342471027238492130581898357972",
"189184592490217400099963411623482700645",
"4818252131515125809507460656763332420",
"326381288489347947834829918033936811356",
"26671233851002793088485913157789123704",
"121656624168247063463274741823828789466",
"39814495878586467142454289648892220361"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b96239582531775f2fdcb14de29bdb6870fd4c8c",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/usb/cdns3/cdns3-gadget.c"
}
},
{
"id": "CVE-2025-37812-f66bb759",
"digest": {
"function_hash": "161897576423118967914786185025477563737",
"length": 1003.0
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b96239582531775f2fdcb14de29bdb6870fd4c8c",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/usb/cdns3/cdns3-gadget.c",
"function": "cdns3_device_thread_irq_handler"
}
}
]