SB2025090875 - Improper locking in Linux kernel usb rainshadow driver
Published: September 8, 2025
Security Bulletin ID
SB2025090875
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper locking (CVE-ID: CVE-2025-39713)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper locking within the rain_interrupt() function in drivers/media/cec/usb/rainshadow/rainshadow-cec.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/1c2769dc80255824542ea5a4ff1a07dcdeb1603f
- https://git.kernel.org/stable/c/2964dbe631fd21ad7873b1752b895548d3c12496
- https://git.kernel.org/stable/c/3c3e33b7edca7a2d6a96801f287f9faeb684d655
- https://git.kernel.org/stable/c/6aaef1a75985865d8c6c5b65fb54152060faba48
- https://git.kernel.org/stable/c/7af160aea26c7dc9e6734d19306128cce156ec40
- https://git.kernel.org/stable/c/ed905fe7cba03cf22ae0b84cf1b73cd1c070423a
- https://git.kernel.org/stable/c/fbc81e78d75bf28972bc22b1599559557b1a1b83
- https://git.kernel.org/stable/c/ff9dd3db6cd4c6b54a2ecbc58151bea4ec63bc59