In the Linux kernel, the following vulnerability has been resolved:
USB: core: Make do_proc_control() and do_proc_bulk() killable
The USBDEVFS_CONTROL and USBDEVFS_BULK ioctls invoke usb_start_wait_urb(), which contains an uninterruptible wait with a user-specified timeout value. If timeout value is very large and the device being accessed does not respond in a reasonable amount of time, the kernel will complain about "Task X blocked for more than N seconds", as found in testing by syzbot:
INFO: task syz-executor.0:8700 blocked for more than 143 seconds. Not tainted 5.14.0-rc7-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:23192 pid: 8700 ppid: 8455 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4681 [inline] __schedule+0xc07/0x11f0 kernel/sched/core.c:5938 schedule+0x14b/0x210 kernel/sched/core.c:6017 schedule_timeout+0x98/0x2f0 kernel/time/timer.c:1857 do_wait_for_common+0x2da/0x480 kernel/sched/completion.c:85 __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion_timeout+0x46/0x60 kernel/sched/completion.c:157 usb_start_wait_urb+0x167/0x550 drivers/usb/core/message.c:63 do_proc_bulk+0x978/0x1080 drivers/usb/core/devio.c:1236 proc_bulk drivers/usb/core/devio.c:1273 [inline] usbdev_do_ioctl drivers/usb/core/devio.c:2547 [inline] usbdev_ioctl+0x3441/0x6b10 drivers/usb/core/devio.c:2713 ...
To fix this problem, this patch replaces usbfs's calls to usb_control_msg() and usb_bulk_msg() with special-purpose code that does essentially the same thing (as recommended in the comment for usb_start_wait_urb()), except that it always uses a killable wait and it uses GFP_KERNEL rather than GFP_NOIO.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernel-docUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extra | Sep 26, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 9, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 25, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade python3-perf-debuginfo | Oct 2, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-rtUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade gfs2-kmp-rtUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rt_debug-devel | Aug 9, 2024 | Jun 19, 2024 |
| Ubuntu | — | No solution existsUpgrade linux-azure-fde-5.15 | Jun 26, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub