CVE-2025-40071
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/10/2025
Last modified:
30/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
tty: n_gsm: Don&#39;t block input queue by waiting MSC<br />
<br />
Currently gsm_queue() processes incoming frames and when opening<br />
a DLC channel it calls gsm_dlci_open() which calls gsm_modem_update().<br />
If basic mode is used it calls gsm_modem_upd_via_msc() and it<br />
cannot block the input queue by waiting the response to come<br />
into the same input queue.<br />
<br />
Instead allow sending Modem Status Command without waiting for remote<br />
end to respond. Define a new function gsm_modem_send_initial_msc()<br />
for this purpose. As MSC is only valid for basic encoding, it does<br />
not do anything for advanced or when convergence layer type 2 is used.



