In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix invalid pointer dereference in Etron workaround This check is performed before prepare_transfer() and prepare_ring…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix invalid pointer dereference in Etron workaround This check is performed before prepare_transfer() and prepare_ring(), so enqueue can already point at the final link TRB of a segment. And indeed it will, some 0.4% of times this code is called. Then enqueue + 1 is an invalid pointer. It will crash the kernel right away or load some junk which may look like a link TRB and cause the real link TRB to be replaced wi…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/0624e29c595b05e7a0e6d1c368f0a05799928e30 Patch
- https://git.kernel.org/stable/c/142273a49f2c315eabdbdf5a71c15e479b75ca91 Patch
- https://git.kernel.org/stable/c/1ea050da5562af9b930d17cbbe9632d30f5df43a Patch
- https://git.kernel.org/stable/c/bce3055b08e303e28a8751f6073066f5c33a0744 Patch
Timeline
- nvd_ingest NVD