In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabled
When only PHY1 is used (for example on Odroid-HC4), the regmap init code uses the usb2 ports when doesn't initialize the PHY1 regmap entry.
This fixes: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000020 ... pc : regmapupdatebitsbase+0x40/0xa0 lr : dwc3mesong12ausb2initphy+0x4c/0xf8 ... Call trace: regmapupdatebitsbase+0x40/0xa0 dwc3mesong12ausb2initphy+0x4c/0xf8 dwc3mesong12ausb2init+0x7c/0xc8 dwc3mesong12ausbinit+0x28/0x48 dwc3mesong12aprobe+0x298/0x540 platformprobe+0x70/0xe0 reallyprobe+0xf0/0x4d8 driverprobe_device+0xfc/0x168 ...