USB Handling Vulnerability in Renesas Products

CVE-2025-38136

What is CVE-2025-38136?

A vulnerability in the Linux kernel affects the USB handling for Renesas devices. Specifically, during the usbhs_probe() function, there is a risk of accessing device registers before properly enabling the necessary clocks. This leads to runtime issues, including external abort errors, particularly notable in the Renesas RZ/V2H SoC. To resolve this, the power management sequence has been reordered to ensure that clocks are activated prior to register access, thus preventing potential system crashes.

References