Wesley Cheng

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** A vulnerability in the Linux kernel has been resolved. The issue occurs when the `list for each entry safe()` macro is used with gadget giveback, allowing other routines to execute while items are being removed from the `cancelled list`. This can lead to a situation where a request is referenced after it has been removed, causing a panic when list debug is enabled. The vulnerability is related to the `dwc3 gadget ep cleanup cancelled requests()` function and the `dwc3 gadget giveback()` function. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.