CVE-2025-38010

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking

The current implementation uses bias_pad_enable as a reference count to

manage the shared bias pad for all UTMI PHYs. However, during system

suspension with connected USB devices, multiple power-down requests for

the UTMI pad result in a mismatch in the reference count, which in turn

produces warnings such as:

[ 237.762967] WARNING: CPU: 10 PID: 1618 at tegra186_utmi_pad_power_down+0x160/0x170

[ 237.763103] Call trace:

[ 237.763104] tegra186_utmi_pad_power_down+0x160/0x170

[ 237.763107] tegra186_utmi_phy_power_off+0x10/0x30

[ 237.763110] phy_power_off+0x48/0x100

[ 237.763113] tegra_xusb_enter_elpg+0x204/0x500

[ 237.763119] tegra_xusb_suspend+0x48/0x140

[ 237.763122] platform_pm_suspend+0x2c/0xb0

[ 237.763125] dpm_run_callback.isra.0+0x20/0xa0

[ 237.763127] __device_suspend+0x118/0x330

[ 237.763129] dpm_suspend+0x10c/0x1f0

[ 237.76

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References