Threats tagged 'ghsa-mhpr-v3hf-gcxg'

CVE-2024-42085 is a medium-severity vulnerability in the Linux kernel's USB DWC3 core driver. It involves a deadlock condition triggered during gadget suspend/resume when the CONFIG_USB_DWC3_DUAL_ROLE configuration is enabled. The deadlock arises due to redundant locking of the OTG mode spinlock, introduced by recent commits that removed certain lock checks but forgot to remove the OTG mode lock. This causes nested spinlock acquisition attempts leading to a deadlock when the system enters suspend state via echo mem > /sys/power/state.