usb: dwc3: Remove WARN_ON for device endpoint command timeouts
CVE-2025-39801 is fixed in 43 products on 1 platform, first by DEBIAN-CVE-2025-39801, released September 15, 2025. It is not reported as exploited. Patch Radar priority: Routine.
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Remove WARN_ON for device endpoint command timeouts This commit addresses a rarely observed endpoint command timeout which causes kernel panic due to warn when 'panic_on_warn' is enabled and unnecessary call trace prints when 'panic_on_warn' is disabled. It is seen during fast software-controlled connect/disconnect testcases. The following is one such endpoint command timeout that we observed: 1. Connect ======= ->dwc3_thread_interrupt ->dwc3_ep0_interrupt ->configfs_composite_setup ->composite_setup ->usb_ep_queue ->dwc3_gadget_ep0_queue ->__dwc3_gadget_ep0_queue ->__dwc3_ep0_do_control_data ->dwc3_send_gadget_ep_cmd 2. Disconnect ========== ->dwc3_thread_interrupt ->dwc3_gadget_disconnect_interrupt ->dwc3_ep0_reset_state ->dwc3_ep0_end_control_data ->dwc3_send_gadget_ep_cmd In the issue scenario, in Exynos platforms, we observed that control transfers for the previous connect have not yet been completed and end transfer command sent as a part of the disconnect sequence and processing of USB_ENDPOINT_HALT feature request from the host timeout. This maybe an expected scenario since the controller is processing EP commands sent as a part of the previous connect. It maybe better to remove WARN_ON in all places where device endpoint commands are sent to avoid unnecessary kernel panic due to warn.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bpftool · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| bpftool · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| dtb-aarch64 · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| dtb-aarch64 · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-64kb · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-64kb · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-64kb · sles 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-64kb · sles 15.7 | 6.4.0-150700.53.22.1 | SUSE-SU-2025:4057-1 | Nov 11, 2025 |
| kernel-64kb · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-azure · opensuse-leap 15.6 | 6.4.0-150600.8.52.1 | SUSE-SU-2025:03634-1 | Oct 17, 2025 |
| kernel-azure · sles 15.6 | 6.4.0-150600.8.52.1 | SUSE-SU-2025:03634-1 | Oct 17, 2025 |
| kernel-azure · sles 15.7 | 6.4.0-150700.20.18.1 | SUSE-SU-2025:4132-1 | Nov 18, 2025 |
| kernel-debug · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-default · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-default · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-default · sles 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-default · sles 15.7 | 6.4.0-150700.53.22.1 | SUSE-SU-2025:4057-1 | Nov 11, 2025 |
| kernel-default · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-default-base · opensuse-leap 15.6 | 6.4.0-150600.23.73.1.150600.12.32.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-default-base · opensuse-leap 16.0 | 6.12.0-160000.6.1.160000.2.4 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-default-base · sles 15.6 | 6.4.0-150600.23.73.1.150600.12.32.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-default-base · sles 15.7 | 6.4.0-150700.53.22.1.150700.17.15.1 | SUSE-SU-2025:4057-1 | Nov 11, 2025 |
| kernel-default-base · sles 16.0 | 6.12.0-160000.6.1.160000.2.4 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-docs · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-docs · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-docs · sles 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-docs · sles 15.7 | 6.4.0-150700.53.22.1 | SUSE-SU-2025:4057-1 | Nov 11, 2025 |
| kernel-docs · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-kvmsmall · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-kvmsmall · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-kvmsmall · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-livepatch-SLE15-SP6-RT_Update_16 · sles 15.6 | 1-150600.1.3.1 | SUSE-SU-2025:3751-1 | Oct 23, 2025 |
| kernel-livepatch-SLE15-SP6_Update_16 · sles 15.6 | 1-150600.13.3.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-livepatch-SLE15-SP7-RT_Update_6 · sles 15.7 | 1-150700.1.3.1 | SUSE-SU-2025:4141-1 | Nov 19, 2025 |
| kernel-livepatch-SLE15-SP7_Update_6 · sles 15.7 | 1-150700.15.3.1 | SUSE-SU-2025:4057-1 | Nov 11, 2025 |
| kernel-obs-build · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-obs-build · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-obs-build · sles 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-obs-build · sles 15.7 | 6.4.0-150700.53.22.1 | SUSE-SU-2025:4057-1 | Nov 11, 2025 |
| kernel-obs-qa · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-obs-qa · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-obs-qa · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-rt · opensuse-leap 15.6 | 6.4.0-150600.10.55.1 | SUSE-SU-2025:3751-1 | Oct 23, 2025 |
| kernel-rt · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-rt_debug · opensuse-leap 15.6 | 6.4.0-150600.10.55.1 | SUSE-SU-2025:3751-1 | Oct 23, 2025 |
| kernel-source · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-source · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-source · sles 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-source · sles 15.7 | 6.4.0-150700.53.22.1 | SUSE-SU-2025:4057-1 | Nov 11, 2025 |
| kernel-source · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-source-azure · opensuse-leap 15.6 | 6.4.0-150600.8.52.1 | SUSE-SU-2025:03634-1 | Oct 17, 2025 |
| kernel-source-azure · sles 15.6 | 6.4.0-150600.8.52.1 | SUSE-SU-2025:03634-1 | Oct 17, 2025 |
| kernel-source-azure · sles 15.7 | 6.4.0-150700.20.18.1 | SUSE-SU-2025:4132-1 | Nov 18, 2025 |
| kernel-source-rt · opensuse-leap 15.6 | 6.4.0-150600.10.55.1 | SUSE-SU-2025:3751-1 | Oct 23, 2025 |
| kernel-syms · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-syms · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-syms · sles 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-syms · sles 15.7 | 6.4.0-150700.53.22.1 | SUSE-SU-2025:4057-1 | Nov 11, 2025 |
| kernel-syms · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-syms-azure · opensuse-leap 15.6 | 6.4.0-150600.8.52.1 | SUSE-SU-2025:03634-1 | Oct 17, 2025 |
| kernel-syms-azure · sles 15.6 | 6.4.0-150600.8.52.1 | SUSE-SU-2025:03634-1 | Oct 17, 2025 |
| kernel-syms-azure · sles 15.7 | 6.4.0-150700.20.18.1 | SUSE-SU-2025:4132-1 | Nov 18, 2025 |
| kernel-syms-rt · opensuse-leap 15.6 | 6.4.0-150600.10.55.1 | SUSE-SU-2025:3751-1 | Oct 23, 2025 |
| kernel-uek · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-container · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-container · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-container-debug · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-container-debug · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-core · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-core · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug-core · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug-core · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug-devel · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug-devel · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug-modules · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug-modules · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug-modules-extra · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug-modules-extra · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-devel · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-devel · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-doc · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-doc · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-modules · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-modules · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-modules-extra · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-modules-extra · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k-core · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k-core · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k-devel · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k-devel · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k-modules · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k-modules · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k-modules-extra · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k-modules-extra · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-zfcpdump · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-zfcpdump · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-zfcpdump · sles 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-zfcpdump · sles 15.7 | 6.4.0-150700.53.22.1 | SUSE-SU-2025:4057-1 | Nov 11, 2025 |
| kernel-zfcpdump · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| linux · Debian 12.15 (bookworm) | 6.1.153-1 | DEBIAN-CVE-2025-39801 | Sep 15, 2025 |
| linux · Debian 13.5 (trixie) | 6.12.48-1 | DEBIAN-CVE-2025-39801 | Sep 15, 2025 |
| linux · Debian 14 | 6.16.5-1 | DEBIAN-CVE-2025-39801 | Sep 15, 2025 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.