CVE-2024-46675

usb: dwc3: core: Prevent USB core invalid event buffer address access

State
Published
Severity
Not scored
Published
Sep 13, 2024
Updated
May 11, 2026
Reserved
Sep 11, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc3: core: Prevent USB core invalid event buffer address access

This commit addresses an issue where the USB core could access an invalid event buffer address during runtime suspend, potentially causing SMMU faults and other memory issues in Exynos platforms. The problem arises from the following sequence. 1. In dwc3_gadget_suspend, there is a chance of a timeout when moving the USB core to the halt state after clearing the run/stop bit by software. 2. In dwc3_core_exit, the event buffer is cleared regardless of the USB core's status, which may lead to an SMMU faults and other memory issues. if the USB core tries to access the event buffer address.

To prevent this hardware quirk on Exynos platforms, this commit ensures that the event buffer address is not cleared by software when the USB core is active during runtime suspend by checking its status before clearing the buffer address.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9f8a67b65a49d0e35c6ca782136c84541d948a64 to before eca3f543f817da87c00d1a5697b473efb548204fAffected
  • 9f8a67b65a49d0e35c6ca782136c84541d948a64 to before d2afc2bffec77316b90d530b07695e3f534df914Affected
  • 9f8a67b65a49d0e35c6ca782136c84541d948a64 to before b72da4d89b97da71e056cc4d1429b2bc426a9c2fAffected
  • 9f8a67b65a49d0e35c6ca782136c84541d948a64 to before 111277b881def3153335acfe0d1f43e6cd83ac93Affected
  • 9f8a67b65a49d0e35c6ca782136c84541d948a64 to before 2189fd13c577d7881f94affc09c950a795064c4bAffected
  • 9f8a67b65a49d0e35c6ca782136c84541d948a64 to before 7bb11a75dd4d3612378b90e2a4aa49bdccea28abAffected
  • 9f8a67b65a49d0e35c6ca782136c84541d948a64 to before e23f6ad8d110bf632f7471482e10b43dc174fb72Affected
  • 9f8a67b65a49d0e35c6ca782136c84541d948a64 to before 14e497183df28c006603cc67fd3797a537eef7b9Affected
LinuxLinux
  • 4.8Affected
  • before 4.8Not affected
  • 4.19.321 through 4.19.*Not affected
  • 5.4.283 through 5.4.*Not affected
  • 5.10.225 through 5.10.*Not affected
  • 5.15.166 through 5.15.*Not affected
  • 6.1.108 through 6.1.*Not affected
  • 6.6.49 through 6.6.*Not affected
  • 6.10.8 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.