5.5

CVE-2024-53070

usb: dwc3: fix fault at system suspend if device was already runtime suspended

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc3: fix fault at system suspend if device was already runtime suspended

If the device was already runtime suspended then during system suspend
we cannot access the device registers else it will crash.

Also we cannot access any registers after dwc3_core_exit() on some
platforms so move the dwc3_enable_susphy() call to the top.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.15.170 < 5.15.172
Linux ≫ Linux Kernel Version >= 6.1.115 < 6.1.117
Linux ≫ Linux Kernel Version >= 6.6.59 < 6.6.61
Linux ≫ Linux Kernel Version >= 6.11.5 < 6.11.8
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.24% 0.147
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA-ADP 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/06b98197b69e2f2af9cb1991ee0b1c876edf7b86
Patch
https://git.kernel.org/stable/c/4abc5ee334fe4aba50461c45fdaaa4c5e5c57789
Patch
https://git.kernel.org/stable/c/562804b1561cc248cc37746a1c96c83cab1d7209
Patch
https://git.kernel.org/stable/c/9cfb31e4c89d200d8ab7cb1e0bb9e6e8d621ca0b
Patch
https://git.kernel.org/stable/c/d9e65d461a9de037e7c9d584776d025cfce6d86d
Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html