CVE-2025-40071 — Use of Blocking Code in Single-threaded, Non-blocking Context in Linux
Severity
3.2LOWOSV
No vectorEPSS
0.0%
top 92.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 28
Latest updateApr 9
Description
In the Linux kernel, the following vulnerability has been resolved:
tty: n_gsm: Don't block input queue by waiting MSC
Currently gsm_queue() processes incoming frames and when opening
a DLC channel it calls gsm_dlci_open() which calls gsm_modem_update().
If basic mode is used it calls gsm_modem_upd_via_msc() and it
cannot block the input queue by waiting the response to come
into the same input queue.
Instead allow sending Modem Status Command without waiting for remote
end to respond. Define…
Affected Packages6 packages
▶CVEListV5linux/linux48473802506d2d6151f59e0e764932b33b53cb3b — c36785f9de03df56ff9b8eca30fa681a12b2310d+6