In the Linux kernel, the following vulnerability has been resolved:
phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
If the external phy working together with phy-omap-usb2 does not implement send_srp(), we may still attempt to call it. This can happen on an idle Ethernet gadget triggering a wakeup for example:
configfs-gadget.g1 gadget.0: ECM Suspend configfs-gadget.g1 gadget.0: Port suspended. Triggering wakeup ... Unable to handle kernel NULL pointer dereference at virtual address 00000000 when execute ... PC is at 0x0 LR is at musb_gadget_wakeup+0x1d4/0x254 [musb_hdrc] ... musb_gadget_wakeup [musb_hdrc] from usb_gadget_wakeup+0x1c/0x3c [udc_core] usb_gadget_wakeup [udc_core] from eth_start_xmit+0x3b0/0x3d4 [u_ether] eth_start_xmit [u_ether] from dev_hard_start_xmit+0x94/0x24c dev_hard_start_xmit from sch_direct_xmit+0x104/0x2e4 sch_direct_xmit from __dev_queue_xmit+0x334/0xd88 __dev_queue_xmit from arp_solicit+0xf0/0x268 arp_solicit from neigh_probe+0x54/0x7c neigh_probe from __neigh_event_send+0x22c/0x47c __neigh_event_send from neigh_resolve_output+0x14c/0x1c0 neigh_resolve_output from ip_finish_output2+0x1c8/0x628 ip_finish_output2 from ip_send_skb+0x40/0xd8 ip_send_skb from udp_send_skb+0x124/0x340 udp_send_skb from udp_sendmsg+0x780/0x984 udp_sendmsg from __sys_sendto+0xd8/0x158 __sys_sendto from ret_fast_syscall+0x0/0x58
Let's fix the issue by checking for send_srp() and set_vbus() before calling them. For USB peripheral only cases these both could be NULL.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-modulesUpgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-coreUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rtUpgrade kernel-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-64kUpgrade kernel-rt-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-debug-uki-virtUpgrade kernel-cross-headersUpgrade kernel-64k-modules-coreUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade rtlaUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-docUpgrade perfUpgrade kernel-64k-develUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-devel | Sep 26, 2024 | Feb 26, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Feb 26, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 24, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | Feb 26, 2024 |
| Rocky_linux | — | Upgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-debug-uki-virtUpgrade kernel-tools-debuginfoUpgrade rvUpgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-coreUpgrade libperfUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade rtlaUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade libperf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules | Aug 22, 2024 | Feb 26, 2024 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-debug-develUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade kernel-debugUpgrade reiserfs-kmp-64kbUpgrade kernel-docsUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amlogicUpgrade dtb-amdUpgrade dtb-renesasUpgrade kernel-source-rtUpgrade dtb-appleUpgrade kernel-azure-vdsoUpgrade dtb-broadcomUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-default-manUpgrade kernel-rt-optionalUpgrade kernel-azure-baseUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-default-livepatchUpgrade dtb-mediatekUpgrade kernel-rtUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-debug-vdsoUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade kernel-obs-buildUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade cluster-md-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-kvmsmallUpgrade dtb-amazonUpgrade kernel-64kbUpgrade dtb-rockchipUpgrade dtb-allwinnerUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade kernel-default-develUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-devel-rtUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade kernel-preempt-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade kernel-preemptUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rt | Mar 19, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-cvmUpgrade linux-image-starfiveUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1172-awsUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-181-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-4.15.0-228-genericUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1063-azureUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1155-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04bUpgrade linux-image-raspiUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-4.15.0-1180-azureUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.15.0-1134-oracleUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-nvidiaUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-4.15.0-228-lowlatencyUpgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-5.4.0-1036-iotUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-5.4.0-1124-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-gkeopUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.15.0-1165-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-intelUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-5.4.0-1129-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-bluefield | Mar 12, 2024 | Feb 26, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub