CVE-2024-53070

usb: dwc3: fix fault at system suspend if device was already runtime suspended

State: Published
Severity: 5.5 Medium
Published: Nov 19, 2024
Updated: May 11, 2026
Reserved: Nov 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc3: fix fault at system suspend if device was already runtime suspended

If the device was already runtime suspended then during system suspend we cannot access the device registers else it will crash.

Also we cannot access any registers after dwc3_core_exit() on some platforms so move the dwc3_enable_susphy() call to the top.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	073530898ebf44a9418434e899cfa9ca86945333 to before d9e65d461a9de037e7c9d584776d025cfce6d86dAffected 85ca88f93162acb94dbcb26d0ee2b145864d14a1 to before 562804b1561cc248cc37746a1c96c83cab1d7209Affected 4fad7370086797afe6471493e3a5f36add8c48a7 to before 4abc5ee334fe4aba50461c45fdaaa4c5e5c57789Affected a690a9e38e6ba819789074388de7cff06425ef5b to before 06b98197b69e2f2af9cb1991ee0b1c876edf7b86Affected 705e3ce37bccdf2ed6f848356ff355f480d51a91 to before 9cfb31e4c89d200d8ab7cb1e0bb9e6e8d621ca0bAffected
LinuxLinux	5.15.170 to before 5.15.172Affected 6.1.115 to before 6.1.117Affected 6.6.59 to before 6.6.61Affected 6.11.5 to before 6.11.8Affected

Product

Versions

LinuxLinux

073530898ebf44a9418434e899cfa9ca86945333 to before d9e65d461a9de037e7c9d584776d025cfce6d86dAffected
85ca88f93162acb94dbcb26d0ee2b145864d14a1 to before 562804b1561cc248cc37746a1c96c83cab1d7209Affected
4fad7370086797afe6471493e3a5f36add8c48a7 to before 4abc5ee334fe4aba50461c45fdaaa4c5e5c57789Affected
a690a9e38e6ba819789074388de7cff06425ef5b to before 06b98197b69e2f2af9cb1991ee0b1c876edf7b86Affected
705e3ce37bccdf2ed6f848356ff355f480d51a91 to before 9cfb31e4c89d200d8ab7cb1e0bb9e6e8d621ca0bAffected

LinuxLinux

5.15.170 to before 5.15.172Affected
6.1.115 to before 6.1.117Affected
6.6.59 to before 6.6.61Affected
6.11.5 to before 6.11.8Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.