CVE-2025-38136
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
03/07/2025
Last modified:
03/07/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
usb: renesas_usbhs: Reorder clock handling and power management in probe<br />
<br />
Reorder the initialization sequence in `usbhs_probe()` to enable runtime<br />
PM before accessing registers, preventing potential crashes due to<br />
uninitialized clocks.<br />
<br />
Currently, in the probe path, registers are accessed before enabling the<br />
clocks, leading to a synchronous external abort on the RZ/V2H SoC.<br />
The problematic call flow is as follows:<br />
<br />
usbhs_probe()<br />
usbhs_sys_clock_ctrl()<br />
usbhs_bset()<br />
usbhs_write()<br />
iowrite16()
Impact
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/095cc0b5888acc228f12344e85b17539b9ce9367
- https://git.kernel.org/stable/c/0a1e16a6cbf4452b46f20b862d6141a1e90844ee
- https://git.kernel.org/stable/c/155453ada562c450a4ff5fcf4852b9fa5b6b793a
- https://git.kernel.org/stable/c/1637623ad6205162b17804d07512e6f4cbd2a050
- https://git.kernel.org/stable/c/6bab152e817fd41b9e178fa6b275354795c9703d
- https://git.kernel.org/stable/c/d4c368e4a638ddf4a9d6d687b0ff691aa46cce53
- https://git.kernel.org/stable/c/db96a4fd8614d47c0def265e0e6c996b0ee52a38
- https://git.kernel.org/stable/c/ffb34a60ce86656ba12d46e91f1ccc71dd221251