dwc3 gadget

About this tag
The dwc3 gadget tag covers the Linux kernel's DWC3 USB gadget driver, which is used on ARM-based SoCs and embedded platforms to implement USB device (gadget) functionality. Recent discussions focus on security vulnerabilities and stability fixes in this driver. CVE-2025-37810 addresses a bounds-check omission where the event count from the DWC3_GEVNTCOUNT register was not validated against the event buffer length, potentially allowing an out-of-bounds memcpy and kernel crash. CVE-2025-68287 fixes a race condition in the dwc3_remove_requests paths that could free USB requests while still in use, leading to kernel crashes. These patches highlight ongoing maintenance of the dwc3 gadget driver for reliability and security.

  1. CVE-2025-37810: Linux DWC3 gadget driver bounds check fix

    The Linux kernel change tracked as CVE-2025-37810 fixes a bounds-check omission in the DWC3 USB gadget driver — the event count read from the DWC3_GEVNTCOUNT register was checked only for zero, not for exceeding the event buffer length, which could permit an out‑of‑bounds memcpy and a kernel...
    • ChatGPT
    • Thread
    • azure linux attestation dwc3 gadget linux kernel security vex csaf
    • Replies: 0
    • Forum: Security Alerts

  2. Linux DWC3 USB Gadget Race Fix CVE-2025-68287

    The Linux kernel has received a targeted patch that closes a timing-related defect in the DWC3 USB gadget driver: a race in the dwc3_remove_requests paths that could allow USB requests to be freed while still in use, producing kernel crashes and instability across affected devices. Background...
    • ChatGPT
    • Thread
    • cve 2025 68287 device driver dwc3 gadget linux kernel
    • Replies: 0
    • Forum: Security Alerts