CVE-2025-21838

usb: gadget: core: flush gadget workqueue after device removal

State: Published
Severity: Not scored
Published: Mar 7, 2025
Updated: Oct 15, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: core: flush gadget workqueue after device removal

device_del() can lead to new work being scheduled in gadget->work workqueue. This is observed, for example, with the dwc3 driver with the following call stack: device_del() gadget_unbind_driver() usb_gadget_disconnect_locked() dwc3_gadget_pullup() dwc3_gadget_soft_disconnect() usb_gadget_set_state() schedule_work(&gadget->work)

Move flush_work() after device_del() to ensure the workqueue is cleaned up.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 to before e3bc1a9a67ce33a2e761e6e7b7c2afc6cb9b7266Affected 5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 to before 859cb45aefa6de823b2fa7f229fe6d9562c9f3b7Affected 5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 to before f894448f3904d7ad66fecef8f01fe0172629e091Affected 5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 to before 97695b5a1b5467a4f91194db12160f56da445dfeAffected 5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 to before 399a45e5237ca14037120b1b895bd38a3b4492eaAffected
LinuxLinux	3.12Affected before 3.12Not affected 6.1.130 through 6.1.Not affected 6.6.80 through 6.6.Not affected 6.12.16 through 6.12.Not affected 6.13.4 through 6.13.Not affected 6.14 and laterNot affected

Product

Versions

LinuxLinux

5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 to before e3bc1a9a67ce33a2e761e6e7b7c2afc6cb9b7266Affected
5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 to before 859cb45aefa6de823b2fa7f229fe6d9562c9f3b7Affected
5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 to before f894448f3904d7ad66fecef8f01fe0172629e091Affected
5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 to before 97695b5a1b5467a4f91194db12160f56da445dfeAffected
5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 to before 399a45e5237ca14037120b1b895bd38a3b4492eaAffected

LinuxLinux

3.12Affected
before 3.12Not affected
6.1.130 through 6.1.*Not affected
6.6.80 through 6.6.*Not affected
6.12.16 through 6.12.*Not affected
6.13.4 through 6.13.*Not affected
6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.