CVE-2025-38507

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> HID: nintendo: avoid bluetooth suspend/resume stalls<br /> <br /> Ensure we don&amp;#39;t stall or panic the kernel when using bluetooth-connected<br /> controllers. This was reported as an issue on android devices using<br /> kernel 6.6 due to the resume hook which had been added for usb joycons.<br /> <br /> First, set a new state value to JOYCON_CTLR_STATE_SUSPENDED in a<br /> newly-added nintendo_hid_suspend. This makes sure we will not stall out<br /> the kernel waiting for input reports during led classdev suspend. The<br /> stalls could happen if connectivity is unreliable or lost to the<br /> controller prior to suspend.<br /> <br /> Second, since we lose connectivity during suspend, do not try<br /> joycon_init() for bluetooth controllers in the nintendo_hid_resume path.<br /> <br /> Tested via multiple suspend/resume flows when using the controller both<br /> in USB and bluetooth modes.