Vulnerabilities
- CVSS
- 5.5 Medium
- Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H- EPSS
- 0.12%
- Risk score
- 1.4
- Published
- 2026-05-06
- Status
- Published
In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: gadget: Move vbus draw to workqueue context
Currently dwc3_gadget_vbus_draw() can be called from atomic
context, which in turn invokes power-supply-core APIs. And
some these PMIC APIs have operations that may sleep, leading
to kernel panic.
Fix this by moving the vbus_draw into a workqueue context.
A flaw was found in the Linux kernel's USB DWC3 gadget driver. This vulnerability occurs when the `dwc3_gadget_vbus_draw()` function is called from an atomic context, which then invokes power management integrated circuit (PMIC) APIs that may cause the system to sleep. An attacker could exploit this condition to trigger a kernel panic, leading to a Denial of Service (DoS) on the affected system.
Coverage 3
threat-intel
Multiple vulnerabilities have been discovered in the SUSE Linux kernel. These vulnerabilities can lead to data confidentiality and integrity breaches, policy circumvention, and denial of service conditions. The affected…
threat-intel
Multiple vulnerabilities have been discovered in the Linux kernel of SUSE. Several of these vulnerabilities allow for privilege escalation, data confidentiality breaches, and data integrity issues. These vulnerabilities…
vulnerability
Multiple vulnerabilities have been discovered in the Linux kernel of Ubuntu. Some of these vulnerabilities allow for privilege escalation, data confidentiality breaches, and data integrity compromise. These vulnerabiliti…
Advisories and references