CVE-2025-38136 usb: renesas_usbhs: Reorder clock handling and power management in probe

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Affecting Renesas USB Host Controller Two vulnerabilities have been reported in the Renesas USB Host Controller. CVE-2025-21917, published on April 1, 2025, addresses issues with flushing the notify_hotplug_work, while CVE-2025-38136, published on July 3, 2025, involves reordering clock handling and power management during the probe process. Affected systems may experience instability or performance issues due to these vulnerabilities. 2 sources 52