CVE-2024-53070

usb: dwc3: fix fault at system suspend if device was already runtime suspended

Medium · published November 19, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
14.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc3: fix fault at system suspend if device was already runtime suspended

If the device was already runtime suspended then during system suspend

we cannot access the device registers else it will crash.

Also we cannot access any registers after dwc3_core_exit() on some

platforms so move the dwc3_enable_susphy() call to the top.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00239 · 14.2th percentile
Published
2024-11-19T17:22Z
EPSS history
Timeline
  • 19 NOV 17:22Z
    usb: dwc3: fix fault at system suspend if device was already runtime suspended
    cvelistv5