In the Linux kernel, the following vulnerability has been resolved:
xhci: Fix command ring pointer corruption while aborting a command
The command ring pointer is located at [6:63] bits of the command ring control register (CRCR). All the control bits like command stop, abort are located at [0:3] bits. While aborting a command, we read the CRCR and set the abort bit and write to the CRCR. The read will always give command ring pointer as all zeros. So we essentially write only the control bits. Since we split the 64 bit write into two 32 bit writes, there is a possibility of xHC command ring stopped before the upper dword (all zeros) is written. If that happens, xHC updates the upper dword of its internal command ring pointer with all zeros. Next time, when the command ring is restarted, we see xHC memory access failures. Fix this issue by only writing to the lower dword of CRCR where all control bits are located.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.252-195.481Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf | May 21, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-freescaleUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-rockchipUpgrade kernel-docs-htmlUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade dtb-amlogicUpgrade kernel-default-manUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade kernel-preemptUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-socionextUpgrade kernel-macrosUpgrade kernel-azure-baseUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade dtb-sprdUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-develUpgrade dtb-appleUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade dtb-mediatekUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade dtb-alteraUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-rt | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-azure-fde-5.15Upgrade linux-aws-hweUpgrade linux-oracleUpgrade linux-fipsUpgrade linux-aws-5.4Upgrade linux-azure-fipsUpgrade linux-gkeopUpgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-gcp-fipsUpgrade linux-awsUpgrade linux-gcp-5.4Upgrade linux-hweUpgrade linux-azure-4.15Upgrade linux-bluefieldUpgrade linux-azure-5.4Upgrade linux-aws-fipsUpgrade linux-gcpUpgrade linux-gcp-4.15Upgrade linux-azureUpgrade linux-ibmUpgrade linux-kvmUpgrade linux-hwe-5.4Upgrade linux-raspi-5.4Upgrade linux | Nov 19, 2024 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub