CVE-2025-68327

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc7-next-20250922-00010-g41050493b2bd

Description A flaw exists in the Linux kernel's Renesas USB Host Controller driver (usbhs). Specifically, a synchronous external abort can occur on the Renesas RZ/G3S SoC when the unbind operation is executed after a specific configuration sequence. This happens because the usbhs sys function pullup() function, which accesses IP registers, is called after the USBHS clocks have been disabled. The issue is reproducible with module stop functionality enabled, leading to a bus error when a master accesses a module with a stopped clock. The problem arises from the order of operations during device removal, where IP clocks are not disabled at the end of the remove process.

Recommendations Update the Linux kernel to version 6.17.0-rc7-next-20250922-00010-g41050493b2bd or a later version that includes the fix.