Critical USB WDM Race Condition Vulnerability in Linux Kernel
Summary
CVE-2025-37985: In the Linux kernel, the following vulnerability has been resolved: USB: wdm: close race between wdm_open and wdm_wwan_port_stop Clearing WDM_WWAN_IN_USE must be the last action or we can open a chardev whose URBs are st... Affects linux versions < 6.1.137-1. Fixed in 6.1.137-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interactions. It is known for its stability, performance, and flexibility, supporting a wide range of hardware architectures. This vulnerability specifically affects the USB Wireless Data Modem (WDM) subsystem, which is responsible for managing USB modem devices. The issue arises from a race condition that can lead to improper handling of device states, potentially allowing unauthorized access or system instability.
Vulnerability Detail
In the Linux kernel, a race condition exists between the wdm_open and wdm_wwan_port_stop functions. This vulnerability occurs when the WDM_WWAN_IN_USE flag is cleared prematurely, allowing a character device to be opened while its associated USB Request Blocks (URBs) remain in a poisoned state. This can lead to undefined behavior, including system crashes or security breaches, as the device may not be in a safe state for operation.
How To Fix
Minimum fixed version
6.1.137-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate any risks associated with this issue.
Conclusion
The CVE-2025-37985 vulnerability poses a significant risk to systems running affected versions of the Linux kernel, particularly in the context of USB modem devices. It is imperative to apply the recommended patches to ensure system integrity and security. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2025-37985 is a vulnerability in the Linux kernel related to a race condition in the USB WDM subsystem that can lead to system instability or unauthorized access.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
The consequences may include system crashes, unauthorized access to device functionalities, and potential security breaches due to improper handling of device states.
Yes, patches are available for Debian 12 (version 6.1.137-1) and Debian 13 (version 6.12.27-1). It is crucial to update to these versions to mitigate the risk.
If immediate updates are not possible, closely monitor your systems for unusual behavior and consider isolating affected devices until a patch can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
