In the Linux kernel, the following vulnerability has been resolved:
usb: xhci: Fix invalid pointer dereference in Etron workaround
This check is performed before prepare_transfer() and prepare_ring(), so enqueue can already point at the final link TRB of a segment. And indeed it will, some 0.4% of times this code is called.
Then enqueue + 1 is an invalid pointer. It will crash the kernel right away or load some junk which may look like a link TRB and cause the real link TRB to be replaced with a NOOP. This wouldn't end well.
Use a functionally equivalent test which doesn't dereference the pointer and always gives correct result.
Something has crashed my machine twice in recent days while playing with an Etron HC, and a control transfer stress test ran for confirmation has just crashed it again. The same test passes with this patch applied.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade perf6.12Upgrade kernel-libbpf-develUpgrade kernel6.12Upgrade bpftoolUpgrade kernel-headersUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-tools-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12Upgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-libbpf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-modules-extra-common | Jul 11, 2025 | May 8, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 8, 2025 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-default-livepatch | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-xilinxUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-gke-6.8Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-64k-6.8 | Jun 26, 2025 | May 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub