PT-2025-54085 · Linux · Linux Kernel

Published 2023-01-01 · Updated 2025-12-30 · CVE-2023-54256

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s USB DWC3 driver. A device side reset is incorrectly issued even when the DWC3 is configured as host-only during boot due to an uninitialized current dr role. This can lead to a kernel panic on some platforms with host-only DWC3 configurations when accessing the device register block. The issue stems from a commit (c4a5153e87fd) that replaced a check for HOST only dr mode with current dr role, but the latter is not initialized during boot.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-54256

Affected Products

Linux Kernel

References · 11

• https://security-tracker.debian.org/tracker/CVE-2023-54256 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54256 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54256 · Vendor Advisory
• https://git.kernel.org/stable/c/c1fad1695befef3c3ae5f185ed0f8f394b9962ae · Note
• https://git.kernel.org/stable/c/96c433aff5fd427fde29aba18dbec3df60e8c538 · Note
• https://twitter.com/CVEnew/status/2005993856194732460 · Twitter Post
• https://git.kernel.org/stable/c/b4e909a46919a922da3e2f7983465370f40bdda4 · Note
• https://git.kernel.org/stable/c/6366b1178545e0a29f69845938153aa3c7aa603b · Note
• https://git.kernel.org/stable/c/640cb5f5e4b41fe050519e108d7505a5fd2124c9 · Note
• https://git.kernel.org/stable/c/317d6e4c12b46bde61248ea4ab5e19f68cbd1c57 · Note
• https://git.kernel.org/stable/c/e835c0a4e23c38531dcee5ef77e8d1cf462658c7 · Note