CVE-2023-53054

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc2: fix a devres leak in hw_enable upon suspend resume

Each time the platform goes to low power, PM suspend / resume routines

call: __dwc2_lowlevel_hw_enable -> devm_add_action_or_reset().

This adds a new devres each time.

This may also happen at runtime, as dwc2_lowlevel_hw_enable() can be

called from udc_start().

This can be seen with tracing:

- echo 1 > /sys/kernel/debug/tracing/events/dev/devres_log/enable

- go to low power

- cat /sys/kernel/debug/tracing/trace

A new "ADD" entry is found upon each low power cycle:

... devres_log: 49000000.usb-otg ADD 82a13bba devm_action_release (8 bytes)

... devres_log: 49000000.usb-otg ADD 49889daf devm_action_release (8 bytes)

...

A second issue is addressed here:

- regulator_bulk_enable() is called upon each PM cycle (suspend/resume).

- regulator_bulk_disable() never gets called.

So the reference count for these regulators constantly increase, by one

upon each low

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References