| { |
| "containers": { |
| "cna": { |
| "providerMetadata": { |
| "orgId": "f4215fc3-5b6b-47ff-a258-f7189bd81038" |
| }, |
| "descriptions": [ |
| { |
| "lang": "en", |
| "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: fix fault at system suspend if device was already runtime suspended\n\nIf the device was already runtime suspended then during system suspend\nwe cannot access the device registers else it will crash.\n\nAlso we cannot access any registers after dwc3_core_exit() on some\nplatforms so move the dwc3_enable_susphy() call to the top." |
| } |
| ], |
| "affected": [ |
| { |
| "product": "Linux", |
| "vendor": "Linux", |
| "defaultStatus": "unaffected", |
| "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", |
| "programFiles": [ |
| "drivers/usb/dwc3/core.c" |
| ], |
| "versions": [ |
| { |
| "version": "073530898ebf44a9418434e899cfa9ca86945333", |
| "lessThan": "d9e65d461a9de037e7c9d584776d025cfce6d86d", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "85ca88f93162acb94dbcb26d0ee2b145864d14a1", |
| "lessThan": "562804b1561cc248cc37746a1c96c83cab1d7209", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "4fad7370086797afe6471493e3a5f36add8c48a7", |
| "lessThan": "4abc5ee334fe4aba50461c45fdaaa4c5e5c57789", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "a690a9e38e6ba819789074388de7cff06425ef5b", |
| "lessThan": "06b98197b69e2f2af9cb1991ee0b1c876edf7b86", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "705e3ce37bccdf2ed6f848356ff355f480d51a91", |
| "lessThan": "9cfb31e4c89d200d8ab7cb1e0bb9e6e8d621ca0b", |
| "status": "affected", |
| "versionType": "git" |
| } |
| ] |
| }, |
| { |
| "product": "Linux", |
| "vendor": "Linux", |
| "defaultStatus": "unaffected", |
| "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", |
| "programFiles": [ |
| "drivers/usb/dwc3/core.c" |
| ], |
| "versions": [ |
| { |
| "version": "5.15.170", |
| "lessThan": "5.15.172", |
| "status": "affected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "6.1.115", |
| "lessThan": "6.1.117", |
| "status": "affected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "6.6.59", |
| "lessThan": "6.6.61", |
| "status": "affected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "6.11.5", |
| "lessThan": "6.11.8", |
| "status": "affected", |
| "versionType": "semver" |
| } |
| ] |
| } |
| ], |
| "cpeApplicability": [ |
| { |
| "nodes": [ |
| { |
| "operator": "OR", |
| "negate": false, |
| "cpeMatch": [ |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "5.15.170", |
| "versionEndExcluding": "5.15.172" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "6.1.115", |
| "versionEndExcluding": "6.1.117" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "6.6.59", |
| "versionEndExcluding": "6.6.61" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "6.11.5", |
| "versionEndExcluding": "6.11.8" |
| } |
| ] |
| } |
| ] |
| } |
| ], |
| "references": [ |
| { |
| "url": "https://git.kernel.org/stable/c/d9e65d461a9de037e7c9d584776d025cfce6d86d" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/562804b1561cc248cc37746a1c96c83cab1d7209" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/4abc5ee334fe4aba50461c45fdaaa4c5e5c57789" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/06b98197b69e2f2af9cb1991ee0b1c876edf7b86" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/9cfb31e4c89d200d8ab7cb1e0bb9e6e8d621ca0b" |
| } |
| ], |
| "title": "usb: dwc3: fix fault at system suspend if device was already runtime suspended", |
| "x_generator": { |
| "engine": "bippy-1.2.0" |
| } |
| } |
| }, |
| "cveMetadata": { |
| "assignerOrgId": "f4215fc3-5b6b-47ff-a258-f7189bd81038", |
| "cveID": "CVE-2024-53070", |
| "requesterUserId": "gregkh@kernel.org", |
| "serial": "1", |
| "state": "PUBLISHED" |
| }, |
| "dataType": "CVE_RECORD", |
| "dataVersion": "5.0" |
| } |
