https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 19:30:21 +0000 https://vulnerability.circl.lu/vuln/cve-2026-31756 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()</p> <p>dwc2_gadget_exit_clock_gating() internally calls call_gadget() macro, which expects hsotg-&gt;lock to be held since it does spin_unlock/spin_lock around the gadget driver callback invocation.</p> <p>However, dwc2_hsotg_udc_stop() calls dwc2_gadget_exit_clock_gating() without holding the lock. This leads to: - spin_unlock on a lock that is not held (undefined behavior) - The lock remaining held after dwc2_gadget_exit_clock_gating() returns, causing a deadlock when spin_lock_irqsave() is called later in the same function.</p> <p>Fix this by acquiring hsotg-&gt;lock before calling dwc2_gadget_exit_clock_gating() and releasing it afterwards, which satisfies the locking requirement of the call_gadget() macro.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()</p> <p>dwc2_gadget_exit_clock_gating() internally calls call_gadget() macro, which expects hsotg-&gt;lock to be held since it does spin_unlock/spin_lock around the gadget driver callback invocation.</p> <p>However, dwc2_hsotg_udc_stop() calls dwc2_gadget_exit_clock_gating() without holding the lock. This leads to: - spin_unlock on a lock that is not held (undefined behavior) - The lock remaining held after dwc2_gadget_exit_clock_gating() returns, causing a deadlock when spin_lock_irqsave() is called later in the same function.</p> <p>Fix this by acquiring hsotg-&gt;lock before calling dwc2_gadget_exit_clock_gating() and releasing it afterwards, which satisfies the locking requirement of the call_gadget() macro.</p> https://vulnerability.circl.lu/vuln/cve-2026-31756