SUSE CVE-2026-31756

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: gadget: Fix spinlock/unlock mismatch in dwc2hsotgudcstop dwc2gadgetexitclockgating internally calls callgadget macro, which expects hsotg-lock to be held since it does spinunlock/spinlock around the gadget driver...

drivers/usb/dwc3/gadget.c Heap Buffer Overflow DoS

Vulnerability of the dwc3gadgetexit function in the drivers/usb/dwc3/gadget.c module – The driver for USB devices in Linux operating systems is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2021-47272

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Bail from dwc3gadgetexit if dwc-gadget is NULL There exists a possible scenario in which dwc3gadgetinit can fail: during during host - peripheral mode switch in dwc3setmode, and a pending gadget driver fails to...

UBUNTU-CVE-2021-47272

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Bail from dwc3gadgetexit if dwc-gadget is NULL There exists a possible scenario in which dwc3gadgetinit can fail: during during host - peripheral mode switch in dwc3setmode, and a pending gadget driver fails to...

PT-2021-29419

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.44 Description A potential issue exists where the dwc3 gadget exit function does not properly handle a NULL dwc-gadget pointer. The actual impact and attack plausibility have not yet been proven...

PT-2021-25425

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.44 Description: A potential issue exists where the dwc3 gadget exit function does not properly handle a NULL dwc-gadget pointer. The actual impact and attack plausibility have not yet been proven...

PT-2021-25501

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.11 Description: A potential issue exists where the dwc3 gadget exit function does not properly handle a NULL dwc-gadget pointer. The actual impact and attack plausibility have not yet been proven...