DEBIAN-CVE-2025-40071
Record from OSV · Published October 28, 2025
In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: Don't block input queue by waiting MSC Currently gsm_queue() processes incoming frames and when opening a DLC channel it calls gsm_dlci_open() which calls gsm_modem_update(). If basic mode is used it calls gsm_modem_upd_via_msc() and it cannot block the input queue by waiting the response to come into the same input queue. Instead allow sending Modem Status Command without waiting for remote end to respond. Define a new function gsm_modem_send_initial_msc() for this purpose. As MSC is only valid for basic encoding, it does not do anything for advanced or when convergence layer type 2 is used.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| linux | Debian:13 | 6.12.57-1 |
| linux | Debian:14 | 6.17.6-1 |
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Debian:12 | linux | 6.4.4-1~bpo12+1, 6.6.15-2, 6.6.3-1~exp1 |
| Debian:13 | linux | 6.12.38-1, 6.12.41-1, 6.12.43-1 |
| Debian:14 | linux | 6.12.41-1, 6.12.43-1, 6.12.43-1~bpo12+1 |
Timeline
- Oct 28, 2025 CVE Published
- Oct 23, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln DEBIAN-CVE-2025-40071
vulnetix vdb fixes DEBIAN-CVE-2025-40071Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/DEBIAN-CVE-2025-40071/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart