cbcvebase.
CVE-2025-38136
published 2025-07-03

CVE-2025-38136: In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: Reorder clock handling and power management in probe Reorder the…

medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: Reorder clock handling and power management in probe Reorder the initialization sequence in `usbhs_probe()` to enable runtime PM before accessing registers, preventing potential crashes due to uninitialized clocks. Currently, in the probe path, registers are accessed before enabling the clocks, leading to a synchronous external abort on the RZ/V2H SoC. The problematic call flow is as follows: usbhs_probe() usbhs_sys_clock_ctrl() usbhs_bset() usbhs_write() iowrite16() <-- Register access before enabling clocks Since `iowrite16()` is performed without ensuring the required clocks are enabled, this can lead to access errors. To fix this, enable PM runtime early in the probe function and ensure clocks are acquired before register access, preventing crashes like the following on RZ/V2H: [13.272640] Internal error: synchronous external abort: 0000000096000010 [#1] PREEMPT SMP [13.280814] Modules linked in: cec renesas_usbhs(+) drm_kms_helper fuse drm backlight ipv6 [13.289088] CPU: 1 UID: 0 PID: 195 Comm: (udev-worker) Not tainted 6.14.0-rc7+ #98 [13.296640] Hardware name: Renesas RZ/V2H EVK Board based on r9a09g057h44 (DT) [13.303834] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [13.310770] pc : usbhs_bset+0x14/0x4c [renesas_usbhs] [13.315831] lr : usbhs_probe+0x2e4/0x5ac [renesas_usbhs] [13.321138] sp : ffff8000827e3850 [13.324438] x29: ffff8000827e3860 x28: 0000000000000000 x27: ffff8000827e3ca0 [13.331554] x26: ffff8000827e3ba0 x25: ffff800081729668 x24: 0000000000000025 [13.338670] x23: ffff0000c0f08000 x22: 0000000000000000 x21: ffff0000c0f08010 [13.345783] x20: 0000000000000000 x19: ffff0000c3b52080 x18: 00000000ffffffff [13.352895] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000827e36ce [13.360009] x14: 00000000000003d7 x13: 00000000000003d7 x12: 0000000000000000 [13.367122] x11: 0000000000000000 x10: 0000000000000aa0 x9 : ffff8000827e3750 [13

Affected

35 ranges· showing 25
VendorProductVersion rangeFixed in
debiandebian_linux
debianlinux< linux 6.1.147-1 (bookworm)linux 6.1.147-1 (bookworm)
debianlinux-6.1< linux 6.1.147-1 (bookworm)linux 6.1.147-1 (bookworm)
linuxlinux
linuxlinux>= f1407d5c66240b33d11a7f1a41d55ccf6a9d7647 < 095cc0b5888acc228f12344e85b17539b9ce9367095cc0b5888acc228f12344e85b17539b9ce9367
linuxlinux>= f1407d5c66240b33d11a7f1a41d55ccf6a9d7647 < 155453ada562c450a4ff5fcf4852b9fa5b6b793a155453ada562c450a4ff5fcf4852b9fa5b6b793a
linuxlinux>= f1407d5c66240b33d11a7f1a41d55ccf6a9d7647 < 0a1e16a6cbf4452b46f20b862d6141a1e90844ee0a1e16a6cbf4452b46f20b862d6141a1e90844ee
linuxlinux>= f1407d5c66240b33d11a7f1a41d55ccf6a9d7647 < 1637623ad6205162b17804d07512e6f4cbd2a0501637623ad6205162b17804d07512e6f4cbd2a050
linuxlinux>= f1407d5c66240b33d11a7f1a41d55ccf6a9d7647 < db96a4fd8614d47c0def265e0e6c996b0ee52a38db96a4fd8614d47c0def265e0e6c996b0ee52a38
linuxlinux>= f1407d5c66240b33d11a7f1a41d55ccf6a9d7647 < d4c368e4a638ddf4a9d6d687b0ff691aa46cce53d4c368e4a638ddf4a9d6d687b0ff691aa46cce53
linuxlinux>= f1407d5c66240b33d11a7f1a41d55ccf6a9d7647 < 6bab152e817fd41b9e178fa6b275354795c9703d6bab152e817fd41b9e178fa6b275354795c9703d
linuxlinux>= f1407d5c66240b33d11a7f1a41d55ccf6a9d7647 < ffb34a60ce86656ba12d46e91f1ccc71dd221251ffb34a60ce86656ba12d46e91f1ccc71dd221251
linuxlinux_kernel>= 0 < 5.10.244-15.10.244-1
linuxlinux_kernel>= 0 < 6.1.147-16.1.147-1
linuxlinux_kernel>= 0 < 6.12.35-16.12.35-1
linuxlinux_kernel>= 0 < 6.12.35-16.12.35-1
linuxlinux_kernel>= 0 < 5.15.0-156.1665.15.0-156.166
linuxlinux_kernel>= 0 < 6.8.0-100.1006.8.0-100.100
linuxlinux_kernel>= 3.0 < 5.4.2955.4.295
linuxlinux_kernel>= 5.11 < 5.15.1865.15.186
linuxlinux_kernel>= 5.16 < 6.1.1426.1.142
linuxlinux_kernel>= 5.5 < 5.10.2395.10.239
linuxlinux_kernel>= 6.13 < 6.15.36.15.3
linuxlinux_kernel>= 6.2 < 6.6.946.6.94
linuxlinux_kernel>= 6.7 < 6.12.346.12.34

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM