CVE-2025-68327

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

usb: renesas_usbhs: Fix synchronous external abort on unbind

A synchronous external abort occurs on the Renesas RZ/G3S SoC if unbind is

executed after the configuration sequence described above:

modprobe usb_f_ecm

modprobe libcomposite

modprobe configfs

cd /sys/kernel/config/usb_gadget

mkdir -p g1

cd g1

echo "0x1d6b" > idVendor

echo "0x0104" > idProduct

mkdir -p strings/0x409

echo "0123456789" > strings/0x409/serialnumber

echo "Renesas." > strings/0x409/manufacturer

echo "Ethernet Gadget" > strings/0x409/product

mkdir -p functions/ecm.usb0

mkdir -p configs/c.1

mkdir -p configs/c.1/strings/0x409

echo "ECM" > configs/c.1/strings/0x409/configuration

if [ ! -L configs/c.1/ecm.usb0 ]; then

ln -s functions/ecm.usb0 configs/c.1

fi

echo 11e20000.usb > UDC

echo 11e20000.usb > /sys/bus/platform/drivers/renesas_usbhs/unbind

The displayed trace is as follows:

Internal error: synchronous external abort: 000000009600

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References