In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
When config CONFIG_USB_DWC3_DUAL_ROLE is selected, and trigger system to enter suspend status with below command: echo mem > /sys/power/state There will be a deadlock issue occurring. Detailed invoking path as below: dwc3_suspend_common() spin_lock_irqsave(&dwc->lock, flags); <-- 1st dwc3_gadget_suspend(dwc); dwc3_gadget_soft_disconnect(dwc); spin_lock_irqsave(&dwc->lock, flags); <-- 2nd This issue is exposed by commit c7ebd8149ee5 ("usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend") that removes the code of checking whether dwc->gadget_driver is NULL or not. It causes the following code is executed and deadlock occurs when trying to get the spinlock. In fact, the root cause is the commit 5265397f9442("usb: dwc3: Remove DWC3 locking during gadget suspend/resume") that forgot to remove the lock of otg mode. So, remove the redundant lock of otg mode during gadget suspend/resume.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 7, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-qcomUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade dtb-appleUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-azure-extraUpgrade kernel-debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade dtb-amdUpgrade dtb-armUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade dtb-hisiliconUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade kernel-docsUpgrade dtb-xilinxUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-lgUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade kernel-default-extraUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade gfs2-kmp-rt | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-oem-22.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-virtualUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-intelUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-generic-64k | Sep 16, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub