Answer in brief
CVE-2025-21838 records a Unknown severity vulnerability in usb: gadget: core: flush gadget workqueue after device removal. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 <e3bc1a9a67ce33a2e761e6e7b7c2afc6cb9b7266 || >=5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 <859cb45aefa6de823b2fa7f229fe6d9562c9f3b7 || >=5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 <f894448f3904d7ad66fecef8f01fe0172629e091 || >=5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 <97695b5a1b5467a4f91194db12160f56da445dfe || >=5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 <399a45e5237ca14037120b1b895bd38a3b4492ea | e3bc1a9a67ce33a2e761e6e7b7c2afc6cb9b7266, 859cb45aefa6de823b2fa7f229fe6d9562c9f3b7, f894448f3904d7ad66fecef8f01fe0172629e091, 97695b5a1b5467a4f91194db12160f56da445dfe, 399a45e5237ca14037120b1b895bd38a3b4492ea |
| Linux/Linuxgeneric | 3.12 | Not reported |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <* | * |
Published upstream
Mar 7, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 15, 2026
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: flush gadget workqueue after device removal device_del() can lead to new work being scheduled in gadget->work workqueue. This is observed, for example, with the dwc3 driver with the following call stack: device_del() gadget_unbind_driver() usb_gadget_disconnect_locked() dwc3_gadget_pullup() dwc3_gadget_soft_disconnect() usb_gadget_set_state() schedule_work(&gadget->work) Move flush_work() after device_del() to ensure the workqueue is cleaned up.
Quoted source text, attributed separately from HOL analysis.