Linux Kernel USB Gadget Workqueue Management Vulnerability

A vulnerability in the Linux kernel's USB gadget subsystem can lead to improper workqueue management after a device is removed. The issue arises in the dwc3 driver, where the device_del() function can trigger new work to be scheduled in the gadget's workqueue before the workqueue is properly cleaned up. This can result in unexpected behavior or resource management issues.

Impact

The vulnerability can cause work to be scheduled in the gadget's workqueue after a device has been removed, potentially leading to resource management issues or unexpected behavior in the USB gadget subsystem.

Remediation

The vulnerability has been addressed by modifying the workqueue management to ensure it is properly flushed after the device removal. Users should apply the latest patches available in the Linux kernel to address this issue.