In the Linux kernel, the following vulnerability has been resolved:
USB: core: Make do_proc_control() and do_proc_bulk() killable
The USBDEVFS_CONTROL and USBDEVFS_BULK ioctls invoke usb_start_wait_urb(), which contains an uninterruptible wait with a user-specified timeout value. If timeout value is very large and the device being accessed does not respond in a reasonable amount of time, the kernel will complain about "Task X blocked for more than N seconds", as found in testing by syzbot:
INFO: task syz-executor.0:8700 blocked for more than 143 seconds. Not tainted 5.14.0-rc7-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:23192 pid: 8700 ppid: 8455 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4681 [inline] __schedule+0xc07/0x11f0 kernel/sched/core.c:5938 schedule+0x14b/0x210 kernel/sched/core.c:6017 schedule_timeout+0x98/0x2f0 kernel/time/timer.c:1857 do_wait_for_common+0x2da/0x480 kernel/sched/completion.c:85 __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion_timeout+0x46/0x60 kernel/sched/completion.c:157 usb_start_wait_urb+0x167/0x550 drivers/usb/core/message.c:63 do_proc_bulk+0x978/0x1080 drivers/usb/core/devio.c:1236 proc_bulk drivers/usb/core/devio.c:1273 [inline] usbdev_do_ioctl drivers/usb/core/devio.c:2547 [inline] usbdev_ioctl+0x3441/0x6b10 drivers/usb/core/devio.c:2713 ...
To fix this problem, this patch replaces usbfs's calls to usb_control_msg() and usb_bulk_msg() with special-purpose code that does essentially the same thing (as recommended in the comment for usb_start_wait_urb()), except that it always uses a killable wait and it uses GFP_KERNEL rather than GFP_NOIO.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade bpftoolUpgrade kernel-headers | Sep 26, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools | Oct 9, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 25, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-rt-debug-develUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-debuginfo | Oct 2, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade reiserfs-kmp-rtUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-rt-extraUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-azure | Aug 9, 2024 | Jun 19, 2024 |
| Ubuntu | — | No solution existsUpgrade linux-azure-fde-5.15 | Jun 26, 2025 | Jun 19, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub