In the Linux kernel, the following vulnerability has been resolved:
xhci: handle isoc Babble and Buffer Overrun events properly
xHCI 4.9 explicitly forbids assuming that the xHC has released its ownership of a multi-TRB TD when it reports an error on one of the early TRBs. Yet the driver makes such assumption and releases the TD, allowing the remaining TRBs to be freed or overwritten by new TDs.
The xHC should also report completion of the final TRB due to its IOC flag being set by us, regardless of prior errors. This event cannot be recognized if the TD has already been freed earlier, resulting in "Transfer event TRB DMA ptr not part of current TD" error message.
Fix this by reusing the logic for processing isoc Transaction Errors. This also handles hosts which fail to report the final completion.
Fix transfer length reporting on Babble errors. They may be caused by device malfunction, no guarantee that the buffer has been filled.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-docUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel | Jun 6, 2024 | Apr 2, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.152-100.162Upgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfo | Aug 28, 2024 | Apr 2, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade python3-perfUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-modules-extra-common | Feb 17, 2025 | Apr 2, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Jun 26, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelists | Oct 8, 2024 | Apr 2, 2024 |
| Oracle_linux | — | Upgrade kernel | Jun 6, 2024 | Apr 2, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jun 6, 2024 | Apr 2, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfoUpgrade kernel-modules | Jun 17, 2024 | Apr 2, 2024 |
| Suse | — | Upgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade dtb-armUpgrade kernel-rt-develUpgrade dtb-socionextUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-default-optionalUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-default-manUpgrade dtb-xilinxUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade dtb-rockchipUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-azure-develUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade kernel-azure-baseUpgrade dtb-lgUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-debug-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-azure-optionalUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-sourceUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade dtb-caviumUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade dtb-renesasUpgrade dlm-kmp-64kb | Apr 18, 2024 | Apr 2, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-awsUpgrade linux-image-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-oem-22.04dUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-genericUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1027-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-6.5Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-intel-iotgUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-kvmUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-ibmUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-azureUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-gcpUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-20.04 | Jul 1, 2024 | Apr 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub