In the Linux kernel, the following vulnerability has been resolved:
xhci: Fix command ring pointer corruption while aborting a command
The command ring pointer is located at [6:63] bits of the command ring control register (CRCR). All the control bits like command stop, abort are located at [0:3] bits. While aborting a command, we read the CRCR and set the abort bit and write to the CRCR. The read will always give command ring pointer as all zeros. So we essentially write only the control bits. Since we split the 64 bit write into two 32 bit writes, there is a possibility of xHC command ring stopped before the upper dword (all zeros) is written. If that happens, xHC updates the upper dword of its internal command ring pointer with all zeros. Next time, when the command ring is restarted, we see xHC memory access failures. Fix this issue by only writing to the lower dword of CRCR where all control bits are located.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.75-79.358Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.252-195.481Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-toolsUpgrade python-perf | May 21, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade dtb-exynosUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-default-manUpgrade dtb-lgUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade kernel-macrosUpgrade kernel-azure-baseUpgrade kernel-rtUpgrade dtb-amazonUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade dtb-armUpgrade dtb-marvellUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade dtb-apmUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-preemptUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-azureUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade dtb-amdUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade dtb-appleUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dlm-kmp-64kb | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linuxUpgrade linux-hwe-5.4Upgrade linux-aws-fipsUpgrade linux-bluefieldUpgrade linux-azure-4.15Upgrade linux-gcp-4.15Upgrade linux-kvmUpgrade linux-hweUpgrade linux-raspi-5.4Upgrade linux-gcp-5.4Upgrade linux-awsUpgrade linux-gcpUpgrade linux-azure-5.4Upgrade linux-ibmUpgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-raspiUpgrade linux-azure-fde-5.15Upgrade linux-fipsUpgrade linux-oracleUpgrade linux-aws-hwe | Nov 19, 2024 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub