CVE-2023-53580

CVE-2023-53580 affects the Linux kernel USB gadget core, where the gadget_unbind_driver() path could deadlock with usb_gadget_deactivate() when a UVC gadget driver is removed. The root cause is that gadget_unbind_driver() held udc->connect_lock while invoking the driver’s unbind(), while usb_g...

CVE-2023-53580 USB: Gadget: core: Help prevent panic during UVC unconfigure

In the Linux kernel, the following vulnerability has been resolved: USB: Gadget: core: Help prevent panic during UVC unconfigure Avichal Rakesh reported a kernel panic that occurred when the UVC gadget driver was removed from a gadget's configuration. The panic involves a somewhat complicated...