usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume (Linux Linux)

CVE-2025-38376
MEDIUM 5.5

At a glance

Source
NVD
EPSS
EPSS 0.18 % · percentile 7 ()
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Analyzed

Description

In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume Shawn and John reported a hang issue during system suspend as below: - USB gadget is enabled as Ethernet - There is data transfer over USB Ethernet (scp a big file between host and device) - Device is going in/out suspend (echo mem > /sys/power/state) The root cause is the USB device controller is suspended but the USB bus is still active which caused the USB host continues to transfer data with device and the device continues to queue USB requests (in this case, a delayed TCP ACK packet trigger the issue) after controller is suspended, however the USB controller clock is already gated off. Then if udc driver access registers after that point, the system will hang. The correct way to avoid such issue is to disconnect device from host when the USB bus is not at suspend state. Then the host will receive disconnect event and stop data transfer in time. To continue make USB gadget device work after system resume, this will reconnect device automatically. To make usb wakeup work if USB bus is already at suspend state, this will keep connection for it only when USB device controller has enabled wakeup capability.

References

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Linux · Linuxaffected 235ffc17d0146d806f6ad8c094c24ff4878f2edb < 937f49be49d6ee696eb5457c21ff89c135c9b5ae ; affected 235ffc17d0146d806f6ad8c094c24ff4878f2edb < c68a27bbebbdb4e0ccd45d4f0df7111a09ddac24 ; affected 235ffc17d0146d806f6ad8c094c24ff4878f2edb < 5fd585fedb79bac2af9976b0fa3ffa354f0cc0bb ; affected 235ffc17d0146d806f6ad8c094c24ff4878f2edb < 31a6afbe86e8e9deba9ab53876ec49eafc7fd901
Linux · Linuxaffected 6.2 ; unaffected 0 < 6.2 ; unaffected 6.6.97 ≤ 6.6.* ; unaffected 6.12.37 ≤ 6.12.* ; unaffected 6.15.6 ≤ 6.15.* ; unaffected 6.16 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD