In the Linux kernel, the following vulnerability has been resolved:
xhci: Fix command ring pointer corruption while aborting a command
The command ring pointer is located at [6:63] bits of the command ring control register (CRCR). All the control bits like command stop, abort are located at [0:3] bits. While aborting a command, we read the CRCR and set the abort bit and write to the CRCR. The read will always give command ring pointer as all zeros. So we essentially write only the control bits. Since we split the 64 bit write into two 32 bit writes, there is a possibility of xHC command ring stopped before the upper dword (all zeros) is written. If that happens, xHC updates the upper dword of its internal command ring pointer with all zeros. Next time, when the command ring is restarted, we see xHC memory access failures. Fix this issue by only writing to the lower dword of CRCR where all control bits are located.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-livepatch-4.14.252-195.481Upgrade kernelUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools | May 21, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade kernel-default-vdsoUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-preempt-develUpgrade kernel-debugUpgrade dtb-alteraUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-default-manUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade dtb-armUpgrade kernel-obs-qaUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-macrosUpgrade dtb-amazonUpgrade dtb-rockchipUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-azure-develUpgrade cluster-md-kmp-azureUpgrade kernel-preemptUpgrade dtb-marvellUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-qcomUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdump | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-hweUpgrade linux-gcp-4.15Upgrade linuxUpgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-awsUpgrade linux-gcpUpgrade linux-azure-4.15Upgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-azure-5.4Upgrade linux-azureUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-aws-hweUpgrade linux-raspiUpgrade linux-aws-5.4Upgrade linux-azure-fde-5.15Upgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-oracle-5.4Upgrade linux-gkeop | Nov 19, 2024 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub