CVE-2024-53070: usb: dwc3: fix fault at system suspend if device was already runtime suspended
In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: fix fault at system suspend if device was already runtime suspended
If the device was already runtime suspended then during system suspend we cannot access the device registers else it will crash.
Also we cannot access any registers after dwc3coreexit() on some platforms so move the dwc3enablesusphy() call to the top.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53070?
CVE-2024-53070 has a medium severity level as it impacts system stability during suspend operations.
How do I fix CVE-2024-53070?
To fix CVE-2024-53070, update the Linux kernel to versions beyond 5.15.172, 6.1.117, 6.6.61, or 6.11.8.
Which Linux kernel versions are affected by CVE-2024-53070?
CVE-2024-53070 affects Linux kernel versions from 5.15.170 to 5.15.172, 6.1.115 to 6.1.117, 6.6.59 to 6.6.61, and 6.11.5 to 6.11.8.
What is the impact of CVE-2024-53070?
CVE-2024-53070 can cause system crashes if attempts are made to access device registers during system suspend after runtime suspension.
Who discovered CVE-2024-53070?
CVE-2024-53070 was discovered and reported within the Linux kernel development community.