Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: run gadget disconnect from sleepable suspend context The dwc3gadgetsuspend function takes dwc-lock with IRQs disabled, and then calls dwc3disconnectgadget. For async callbacks, the helper only uses plain...

CVE-2024-46675: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core invalid event buffer address access This commit addresses an issue where the USB core could access an invalid event buffer address during runtime suspend, potentially causing SMMU faults and othe...

CVE-2024-26715

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3gadgetsuspend In current scenario if Plug-out and Plug-In performed continuously there could be a chance while checking for dwc-gadgetdriver in dwc3gadgetsuspend, a NULL...

CVE-2024-26715: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3gadgetsuspend In current scenario if Plug-out and Plug-In performed continuously there could be a chance while checking for dwc-gadgetdriver in dwc3gadgetsuspend, a NULL...