CVE-2026-98933

usb: hub: use shorter 120ms post resume hold for SS root hubs

State: Published
Severity: Not scored
Published: Oct 23, 2026
Updated: Oct 30, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: use shorter 120ms post resume hold for SS root hubs

Holding a USB3 hub PM runtime reference for 200ms at hub resume triggers an AMD platform issue. Users running Android adb report crashes after adb has been polling and waking up the USB subsystem once a second for some time. Vendors are working on a solution. Disabling USB runtime PM is one way to prevent this issue, but it is also proven that reducing the hold time to 120ms in resume also mitigates it. See Link for more details.

Reducing the hold time to 120ms for the USB3 roothub is in itself a valid change and optimization, as the current 200ms is excessive: a root hub has no upstream suspended hub whose wake propagation needs to be accounted for, but still need some time for USB3 link training to complete.

Keep the 200ms hold for external hubs that commit 8f5b7e2bec1c ("usb: hub: fix detection of high tier USB3 devices behind suspended hubs") is intended for.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8aa04df2553f29e6249f978a29421f2744a65ffb to before ff21323b74a876c54b1ebe9e5f8ba5abc7e07fd3Affected e38ca702130b7d70834abdbee58135ca471b2106 to before 73d4fbc496935ccaffba15ca5ec33660c2b587fbAffected 43e53eb8433c332666a222bff8e49aa03a470d0d to before 86e0baedd55fca30081fcd858ab336dfc0f1cc09Affected 15fea75a788681dd36a869dd90ff4f0461ea0714 to before e4df763ba3c4fdd1d9256f7a75a17ab7c5e31db6Affected aec11e5f9c452ef64e2c113637ab89a67a5ceb62 to before 2dc82d6a12050c2c678a328cd29837beb367df7dAffected 8f5b7e2bec1c36578fdaa74a6951833541103e27 to before e9545dd8bc62596b2a20966be41f39879ea7c8d0Affected 8f5b7e2bec1c36578fdaa74a6951833541103e27 to before d7c4a49b41583266e1456d40f37966029f61dab9Affected 8f5b7e2bec1c36578fdaa74a6951833541103e27 to before 29480b05e6e226594dc11ccf2a036fbd5cdd0e42Affected 042959e9b479502a921109224c3abcc3d3cf09a1Affected 16840c4e102ee5424ab1c49238f0bbf568d13a1cAffected 5.10.241 to before 5.10.273Affected 5.15.190 to before 5.15.224Affected 6.1.147 to before 6.1.191Affected 6.6.100 to before 6.6.160Affected 6.12.40 to before 6.12.113Affected 5.4.297 to before 5.5Affected 6.15.8 to before 6.16Affected
LinuxLinux	6.16Affected before 6.16Not affected 5.10.273 through 5.10.Not affected 5.15.224 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.113 through 6.12.Not affected 6.18.56 through 6.18.Not affected 7.2.10 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

8aa04df2553f29e6249f978a29421f2744a65ffb to before ff21323b74a876c54b1ebe9e5f8ba5abc7e07fd3Affected
e38ca702130b7d70834abdbee58135ca471b2106 to before 73d4fbc496935ccaffba15ca5ec33660c2b587fbAffected
43e53eb8433c332666a222bff8e49aa03a470d0d to before 86e0baedd55fca30081fcd858ab336dfc0f1cc09Affected
15fea75a788681dd36a869dd90ff4f0461ea0714 to before e4df763ba3c4fdd1d9256f7a75a17ab7c5e31db6Affected
aec11e5f9c452ef64e2c113637ab89a67a5ceb62 to before 2dc82d6a12050c2c678a328cd29837beb367df7dAffected
8f5b7e2bec1c36578fdaa74a6951833541103e27 to before e9545dd8bc62596b2a20966be41f39879ea7c8d0Affected
8f5b7e2bec1c36578fdaa74a6951833541103e27 to before d7c4a49b41583266e1456d40f37966029f61dab9Affected
8f5b7e2bec1c36578fdaa74a6951833541103e27 to before 29480b05e6e226594dc11ccf2a036fbd5cdd0e42Affected
042959e9b479502a921109224c3abcc3d3cf09a1Affected
16840c4e102ee5424ab1c49238f0bbf568d13a1cAffected
5.10.241 to before 5.10.273Affected
5.15.190 to before 5.15.224Affected
6.1.147 to before 6.1.191Affected
6.6.100 to before 6.6.160Affected
6.12.40 to before 6.12.113Affected
5.4.297 to before 5.5Affected
6.15.8 to before 6.16Affected

LinuxLinux

6.16Affected
before 6.16Not affected
5.10.273 through 5.10.*Not affected
5.15.224 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.113 through 6.12.*Not affected
6.18.56 through 6.18.*Not affected
7.2.10 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.