CVE-2025-39801: usb: dwc3: Remove WARN_ON for device endpoint command timeouts
In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: Remove WARNON for device endpoint command timeouts
This commit addresses a rarely observed endpoint command timeout which causes kernel panic due to warn when 'paniconwarn' is enabled and unnecessary call trace prints when 'paniconwarn' is disabled. It is seen during fast software-controlled connect/disconnect testcases. The following is one such endpoint command timeout that we observed:
1. Connect ======= ->dwc3threadinterrupt ->dwc3ep0interrupt ->configfscompositesetup ->compositesetup ->usbepqueue ->dwc3gadgetep0queue ->dwc3gadgetep0queue ->dwc3ep0docontroldata ->dwc3sendgadgetepcmd
2. Disconnect ========== ->dwc3threadinterrupt ->dwc3gadgetdisconnectinterrupt ->dwc3ep0resetstate ->dwc3ep0endcontroldata ->dwc3sendgadgetepcmd
In the issue scenario, in Exynos platforms, we observed that control transfers for the previous connect have not yet been completed and end transfer command sent as a part of the disconnect sequence and processing of USBENDPOINTHALT feature request from the host timeout. This maybe an expected scenario since the controller is processing EP commands sent as a part of the previous connect. It maybe better to remove WARNON in all places where device endpoint commands are sent to avoid unnecessary kernel panic due to warn.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39801?
CVE-2025-39801 has a moderate severity rating due to the potential for kernel panic when 'panic_on_warn' is enabled.
How do I fix CVE-2025-39801?
Fixing CVE-2025-39801 involves updating to a patched version of the Linux kernel that removes the WARN_ON for device endpoint command timeouts.
Which versions of the Linux kernel are affected by CVE-2025-39801?
CVE-2025-39801 affects specific versions of the Linux kernel that include the vulnerable code related to endpoint command timeouts.
Is CVE-2025-39801 present in Microsoft azl3 kernel 6.6.96.2-2?
Yes, CVE-2025-39801 affects the Microsoft azl3 kernel 6.6.96.2-2, so it is essential to apply any available patches.
What are the potential impacts of CVE-2025-39801?
The potential impacts of CVE-2025-39801 include unexpected kernel panics impacting system stability when specific triggering conditions arise.