Fixed
Created: Jul 27, 2025
Updated: Sep 1, 2025
Resolved Date: Jul 28, 2025
Found In Version: 10.25.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 25
Component/s: Kernel
In the Linux kernel, the following vulnerability has been resolved:EOL][EOL]usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume[EOL][EOL]Shawn and John reported a hang issue during system suspend as below:[EOL][EOL] - USB gadget is enabled as Ethernet[EOL] - There is data transfer over USB Ethernet (scp a big file between host[EOL] and device)[EOL] - Device is going in/out suspend (echo mem > /sys/power/state)[EOL][EOL]The root cause is the USB device controller is suspended but the USB bus[EOL]is still active which caused the USB host continues to transfer data with[EOL]device and the device continues to queue USB requests (in this case, a[EOL]delayed TCP ACK packet trigger the issue) after controller is suspended,[EOL]however the USB controller clock is already gated off. Then if udc driver[EOL]access registers after that point, the system will hang.[EOL][EOL]The correct way to avoid such issue is to disconnect device from host when[EOL]the USB bus is not at suspend state. Then the host will receive disconnect[EOL]event and stop data transfer in time. To continue make USB gadget device[EOL]work after system resume, this will reconnect device automatically.[EOL][EOL]To make usb wakeup work if USB bus is already at suspend state, this will[EOL]keep connection for it only when USB device controller has enabled wakeup[EOL]capability.
CREATE(Triage):(User=admin) [CVE-2025-38376 (https://nvd.nist.gov/vuln/detail/CVE-2025-38376)