CVE-2025-39801: usb: dwc3: Remove WARN_ON for device endpoint command timeouts

Published Sep 15, 2025
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc3: Remove WARNON for device endpoint command timeouts

This commit addresses a rarely observed endpoint command timeout which causes kernel panic due to warn when 'paniconwarn' is enabled and unnecessary call trace prints when 'paniconwarn' is disabled. It is seen during fast software-controlled connect/disconnect testcases. The following is one such endpoint command timeout that we observed:

1. Connect ======= ->dwc3threadinterrupt ->dwc3ep0interrupt ->configfscompositesetup ->compositesetup ->usbepqueue ->dwc3gadgetep0queue ->dwc3gadgetep0queue ->dwc3ep0docontroldata ->dwc3sendgadgetepcmd

2. Disconnect ========== ->dwc3threadinterrupt ->dwc3gadgetdisconnectinterrupt ->dwc3ep0resetstate ->dwc3ep0endcontroldata ->dwc3sendgadgetepcmd

In the issue scenario, in Exynos platforms, we observed that control transfers for the previous connect have not yet been completed and end transfer command sent as a part of the disconnect sequence and processing of USBENDPOINTHALT feature request from the host timeout. This maybe an expected scenario since the controller is processing EP commands sent as a part of the previous connect. It maybe better to remove WARNON in all places where device endpoint commands are sent to avoid unnecessary kernel panic due to warn.

Affected Software

10 affected componentsFixes available
Linux Kernel
Microsoft azl3 kernel 6.6.96.2-2
Linux Linux kernel>=3.2<5.15.190
Linux Linux kernel>=5.16<6.1.149
Linux Linux kernel>=6.2<6.6.103
Linux Linux kernel>=6.7<6.12.44
Linux Linux kernel>=6.13<6.16.4
Linux Linux kernel=6.17-rc1
Linux Linux kernel=6.17-rc2
Debian Debian Linux=11.0

Event History

Sep 15, 2025
CVE Published
via MITRE·12:36 PM
Data Sourced
via MITRE·12:36 PM
Description
Data Sourced
via NVD·01:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Sep 16, 2025
Data Sourced
via Microsoft·01:01 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·01:01 AM
DescriptionSeverity

Frequently Asked Questions

1

What is the severity of CVE-2025-39801?

CVE-2025-39801 has a moderate severity rating due to the potential for kernel panic when 'panic_on_warn' is enabled.

2

How do I fix CVE-2025-39801?

Fixing CVE-2025-39801 involves updating to a patched version of the Linux kernel that removes the WARN_ON for device endpoint command timeouts.

3

Which versions of the Linux kernel are affected by CVE-2025-39801?

CVE-2025-39801 affects specific versions of the Linux kernel that include the vulnerable code related to endpoint command timeouts.

4

Is CVE-2025-39801 present in Microsoft azl3 kernel 6.6.96.2-2?

Yes, CVE-2025-39801 affects the Microsoft azl3 kernel 6.6.96.2-2, so it is essential to apply any available patches.

5

What are the potential impacts of CVE-2025-39801?

The potential impacts of CVE-2025-39801 include unexpected kernel panics impacting system stability when specific triggering conditions arise.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203