In the Linux kernel, the following vulnerability has been resolved:
xhci: Fix command ring pointer corruption while aborting a command
The command ring pointer is located at [6:63] bits of the command ring control register (CRCR). All the control bits like command stop, abort are located at [0:3] bits. While aborting a command, we read the CRCR and set the abort bit and write to the CRCR. The read will always give command ring pointer as all zeros. So we essentially write only the control bits. Since we split the 64 bit write into two 32 bit writes, there is a possibility of xHC command ring stopped before the upper dword (all zeros) is written. If that happens, xHC updates the upper dword of its internal command ring pointer with all zeros. Next time, when the command ring is restarted, we see xHC memory access failures. Fix this issue by only writing to the lower dword of CRCR where all control bits are located.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.252-195.481Upgrade python-perf-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.75-79.358Upgrade perf-debuginfoUpgrade kernel-debuginfo | May 21, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade dtb-alteraUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade dtb-amdUpgrade dtb-renesasUpgrade kernel-preempt-develUpgrade dtb-nvidiaUpgrade dlm-kmp-64kbUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade dtb-mediatekUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-rt-livepatchUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-azureUpgrade kernel-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade dtb-amazonUpgrade dtb-armUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade kernel-azure-baseUpgrade kernel-rt_debugUpgrade dtb-apmUpgrade dtb-lgUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-manUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-preemptUpgrade dtb-qcomUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade kernel-source | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-ibmUpgrade linux-awsUpgrade linux-aws-fipsUpgrade linux-gcp-fipsUpgrade linux-hwe-5.4Upgrade linux-raspi-5.4Upgrade linux-gcpUpgrade linux-kvmUpgrade linux-gcp-5.4Upgrade linux-hweUpgrade linux-azure-5.4Upgrade linux-azure-4.15Upgrade linux-gcp-4.15Upgrade linux-azureUpgrade linux-bluefieldUpgrade linuxUpgrade linux-oracle-5.4Upgrade linux-aws-hweUpgrade linux-azure-fde-5.15Upgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-fipsUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-oracle | Nov 19, 2024 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub