Threats tagged 'ghsa-q9hc-qj7m-hpc9'

CVE-2025-38376 is a medium severity vulnerability in the Linux kernel's usb chipidea udc driver. It causes a system hang during suspend/resume cycles when the USB gadget is used as Ethernet and data transfer is active. The issue arises because the USB device controller is suspended while the USB bus remains active, leading to continued data transfer attempts and register access after the controller clock is gated off. The fix involves disconnecting the device from the host during suspend and reconnecting it after resume to prevent the hang.