CVE-2024-53070

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-53070
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: fix fault at system suspend if device was already runtime suspended If the device was already runtime suspended then during system suspend we cannot access the device registers else it will crash. Also we cannot access any registers after dwc3_core_exit() on some platforms so move the dwc3_enable_susphy() call to the top.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/06b98197b69e2f2af9cb1991ee0b1c876edf7b86 Patch
https://git.kernel.org/stable/c/4abc5ee334fe4aba50461c45fdaaa4c5e5c57789 Patch
https://git.kernel.org/stable/c/562804b1561cc248cc37746a1c96c83cab1d7209 Patch
https://git.kernel.org/stable/c/9cfb31e4c89d200d8ab7cb1e0bb9e6e8d621ca0b Patch
https://git.kernel.org/stable/c/d9e65d461a9de037e7c9d584776d025cfce6d86d Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

25 Nov 2024, 20:53

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/06b98197b69e2f2af9cb1991ee0b1c876edf7b86 - () https://git.kernel.org/stable/c/06b98197b69e2f2af9cb1991ee0b1c876edf7b86 - Patch
References () https://git.kernel.org/stable/c/4abc5ee334fe4aba50461c45fdaaa4c5e5c57789 - () https://git.kernel.org/stable/c/4abc5ee334fe4aba50461c45fdaaa4c5e5c57789 - Patch
References () https://git.kernel.org/stable/c/562804b1561cc248cc37746a1c96c83cab1d7209 - () https://git.kernel.org/stable/c/562804b1561cc248cc37746a1c96c83cab1d7209 - Patch
References () https://git.kernel.org/stable/c/9cfb31e4c89d200d8ab7cb1e0bb9e6e8d621ca0b - () https://git.kernel.org/stable/c/9cfb31e4c89d200d8ab7cb1e0bb9e6e8d621ca0b - Patch
References () https://git.kernel.org/stable/c/d9e65d461a9de037e7c9d584776d025cfce6d86d - () https://git.kernel.org/stable/c/d9e65d461a9de037e7c9d584776d025cfce6d86d - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: dwc3: se corrige un error en la suspensión del sistema si el dispositivo ya estaba suspendido en tiempo de ejecución. Si el dispositivo ya estaba suspendido en tiempo de ejecución, durante la suspensión del sistema no podemos acceder a los registros del dispositivo, de lo contrario, se bloqueará. Además, no podemos acceder a ningún registro después de dwc3_core_exit() en algunas plataformas, por lo que movemos la llamada dwc3_enable_susphy() al principio.

19 Nov 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-19 18:15

Updated : 2024-11-25 20:53

NVD link : CVE-2024-53070

Mitre link : CVE-2024-53070

CVE.ORG link : CVE-2024-53070

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo