github - ghsa-363w-4gjr-hxxf

ghsa-363w-4gjr-hxxf

Vulnerability from github

Published

2024-11-19 18:31

Modified

2024-11-25 21:30

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc3: fix fault at system suspend if device was already runtime suspended

If the device was already runtime suspended then during system suspend we cannot access the device registers else it will crash.

Also we cannot access any registers after dwc3_core_exit() on some platforms so move the dwc3_enable_susphy() call to the top.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-53070"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-11-19T18:15:26Z",
    "severity": "MODERATE"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: fix fault at system suspend if device was already runtime suspended\n\nIf the device was already runtime suspended then during system suspend\nwe cannot access the device registers else it will crash.\n\nAlso we cannot access any registers after dwc3_core_exit() on some\nplatforms so move the dwc3_enable_susphy() call to the top.",
  "id": "GHSA-363w-4gjr-hxxf",
  "modified": "2024-11-25T21:30:49Z",
  "published": "2024-11-19T18:31:07Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53070"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/06b98197b69e2f2af9cb1991ee0b1c876edf7b86"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/4abc5ee334fe4aba50461c45fdaaa4c5e5c57789"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/562804b1561cc248cc37746a1c96c83cab1d7209"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/9cfb31e4c89d200d8ab7cb1e0bb9e6e8d621ca0b"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/d9e65d461a9de037e7c9d584776d025cfce6d86d"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

cve-2024-53070

Vulnerability from cvelistv5

Published

2024-11-19 17:22

Modified

2024-12-19 09:38

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: fix fault at system suspend if device was already runtime suspended If the device was already runtime suspended then during system suspend we cannot access the device registers else it will crash. Also we cannot access any registers after dwc3_core_exit() on some platforms so move the dwc3_enable_susphy() call to the top.

References

▼	URL	Tags
	https://git.kernel.org/stable/c/d9e65d461a9de037e7c9d584776d025cfce6d86d
	https://git.kernel.org/stable/c/562804b1561cc248cc37746a1c96c83cab1d7209
	https://git.kernel.org/stable/c/4abc5ee334fe4aba50461c45fdaaa4c5e5c57789
	https://git.kernel.org/stable/c/06b98197b69e2f2af9cb1991ee0b1c876edf7b86
	https://git.kernel.org/stable/c/9cfb31e4c89d200d8ab7cb1e0bb9e6e8d621ca0b

Impacted products

Vendor

Product

Version

▼

Linux

Version: 073530898ebf44a9418434e899cfa9ca86945333
Version: 85ca88f93162acb94dbcb26d0ee2b145864d14a1
Version: 4fad7370086797afe6471493e3a5f36add8c48a7
Version: a690a9e38e6ba819789074388de7cff06425ef5b
Version: 705e3ce37bccdf2ed6f848356ff355f480d51a91

Linux

Version: 5.15.170   ≤
Version: 6.1.115   ≤
Version: 6.6.59   ≤
Version: 6.11.5   ≤

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/usb/dwc3/core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "d9e65d461a9de037e7c9d584776d025cfce6d86d",
              "status": "affected",
              "version": "073530898ebf44a9418434e899cfa9ca86945333",
              "versionType": "git"
            },
            {
              "lessThan": "562804b1561cc248cc37746a1c96c83cab1d7209",
              "status": "affected",
              "version": "85ca88f93162acb94dbcb26d0ee2b145864d14a1",
              "versionType": "git"
            },
            {
              "lessThan": "4abc5ee334fe4aba50461c45fdaaa4c5e5c57789",
              "status": "affected",
              "version": "4fad7370086797afe6471493e3a5f36add8c48a7",
              "versionType": "git"
            },
            {
              "lessThan": "06b98197b69e2f2af9cb1991ee0b1c876edf7b86",
              "status": "affected",
              "version": "a690a9e38e6ba819789074388de7cff06425ef5b",
              "versionType": "git"
            },
            {
              "lessThan": "9cfb31e4c89d200d8ab7cb1e0bb9e6e8d621ca0b",
              "status": "affected",
              "version": "705e3ce37bccdf2ed6f848356ff355f480d51a91",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/usb/dwc3/core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "5.15.172",
              "status": "affected",
              "version": "5.15.170",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.117",
              "status": "affected",
              "version": "6.1.115",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.61",
              "status": "affected",
              "version": "6.6.59",
              "versionType": "semver"
            },
            {
              "lessThan": "6.11.8",
              "status": "affected",
              "version": "6.11.5",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: fix fault at system suspend if device was already runtime suspended\n\nIf the device was already runtime suspended then during system suspend\nwe cannot access the device registers else it will crash.\n\nAlso we cannot access any registers after dwc3_core_exit() on some\nplatforms so move the dwc3_enable_susphy() call to the top."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-19T09:38:25.820Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/d9e65d461a9de037e7c9d584776d025cfce6d86d"
        },
        {
          "url": "https://git.kernel.org/stable/c/562804b1561cc248cc37746a1c96c83cab1d7209"
        },
        {
          "url": "https://git.kernel.org/stable/c/4abc5ee334fe4aba50461c45fdaaa4c5e5c57789"
        },
        {
          "url": "https://git.kernel.org/stable/c/06b98197b69e2f2af9cb1991ee0b1c876edf7b86"
        },
        {
          "url": "https://git.kernel.org/stable/c/9cfb31e4c89d200d8ab7cb1e0bb9e6e8d621ca0b"
        }
      ],
      "title": "usb: dwc3: fix fault at system suspend if device was already runtime suspended",
      "x_generator": {
        "engine": "bippy-5f407fcff5a0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-53070",
    "datePublished": "2024-11-19T17:22:37.706Z",
    "dateReserved": "2024-11-19T17:17:24.976Z",
    "dateUpdated": "2024-12-19T09:38:25.820Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted