CVE-2024-42085

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
29/07/2024
Last modified:
03/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock<br /> <br /> When config CONFIG_USB_DWC3_DUAL_ROLE is selected, and trigger system<br /> to enter suspend status with below command:<br /> echo mem &gt; /sys/power/state<br /> There will be a deadlock issue occurring. Detailed invoking path as<br /> below:<br /> dwc3_suspend_common()<br /> spin_lock_irqsave(&amp;dwc-&gt;lock, flags); lock, flags); gadget_driver is NULL or not. It causes the<br /> following code is executed and deadlock occurs when trying to get the<br /> spinlock. In fact, the root cause is the commit 5265397f9442("usb: dwc3:<br /> Remove DWC3 locking during gadget suspend/resume") that forgot to remove<br /> the lock of otg mode. So, remove the redundant lock of otg mode during<br /> gadget suspend/resume.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.15.128 (including) 5.15.162 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.1 (including) 6.1.97 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.37 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.9.8 (excluding)