Medium 5.5Published Mar 7, 2025

CVE-2025-21838usb: gadget: core: flush gadget workqueue after device removal

Updated under an hour ago (2026-10-19 09:50 UTC)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: flush gadget workqueue after device removal device_del() can lead to new work being scheduled in gadget->work workqueue. This is observed, for example, with the dwc3 driver with the following call stack: device_del() gadget_unbind_driver() usb_gadget_disconnect_locked() dwc3_gadget_pullup() dwc3_gadget_soft_disconnect() usb_gadget_set_state() schedule_work(&gadget->work) Move flush_work() after device_del() to ensure the workqueue is cleaned up.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 15, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 before e3bc1a9a67ce33a2e761e6e7b7c2afc6cb9b7266; 5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 builds before 859cb45aefa6de823b2fa7f229fe6d9562c9f3b7; from 5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 before f894448f3904d7ad66fecef8f01fe0172629e091; from 5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 before 97695b5a1b5467a4f91194db12160f56da445dfe; 5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 builds before 399a45e5237ca14037120b1b895bd38a3b4492ea	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	all versions	CISA ADP
linux linux_kernel linux:linux_kernel	from 3.12 before 6.1.130; from 6.2 before 6.6.80; from 6.7 before 6.12.16; from 6.13 before 6.13.4; 6.14; 6.14	NVD

References

https://git.kernel.org/stable/c/e3bc1a9a67ce33a2e761e6e7b7c2afc6cb9b7266patch
https://git.kernel.org/stable/c/859cb45aefa6de823b2fa7f229fe6d9562c9f3b7patch
https://git.kernel.org/stable/c/f894448f3904d7ad66fecef8f01fe0172629e091patch
https://git.kernel.org/stable/c/97695b5a1b5467a4f91194db12160f56da445dfepatch
https://git.kernel.org/stable/c/399a45e5237ca14037120b1b895bd38a3b4492eapatch
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
https://cert-portal.siemens.com/productcert/html/ssa-784472.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.