CVE-2026-64454

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the usb dwc3 component where the dwc3 gadget suspend() function acquires dwc->lock with interrupts disabled and subsequently calls dwc3 disconnect gadget(). Because the helper only utilizes plain spin unlock() and spin lock() for asynchronous callbacks, the gadget->disconnect() callback continues to execute while interrupts are disabled. This can cause a Lockdep error if a sleepable callback is triggered, as sleeping functions cannot be called from an invalid context where interrupts are disabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.