In the Linux kernel, the following vulnerability has been resolved:
USB: core: Make do_proc_control() and do_proc_bulk() killable
The USBDEVFS_CONTROL and USBDEVFS_BULK ioctls invoke usb_start_wait_urb(), which contains an uninterruptible wait with a user-specified timeout value. If timeout value is very large and the device being accessed does not respond in a reasonable amount of time, the kernel will complain about "Task X blocked for more than N seconds", as found in testing by syzbot:
INFO: task syz-executor.0:8700 blocked for more than 143 seconds. Not tainted 5.14.0-rc7-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:23192 pid: 8700 ppid: 8455 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4681 [inline] __schedule+0xc07/0x11f0 kernel/sched/core.c:5938 schedule+0x14b/0x210 kernel/sched/core.c:6017 schedule_timeout+0x98/0x2f0 kernel/time/timer.c:1857 do_wait_for_common+0x2da/0x480 kernel/sched/completion.c:85 __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion_timeout+0x46/0x60 kernel/sched/completion.c:157 usb_start_wait_urb+0x167/0x550 drivers/usb/core/message.c:63 do_proc_bulk+0x978/0x1080 drivers/usb/core/devio.c:1236 proc_bulk drivers/usb/core/devio.c:1273 [inline] usbdev_do_ioctl drivers/usb/core/devio.c:2547 [inline] usbdev_ioctl+0x3441/0x6b10 drivers/usb/core/devio.c:2713 ...
To fix this problem, this patch replaces usbfs's calls to usb_control_msg() and usb_bulk_msg() with special-purpose code that does essentially the same thing (as recommended in the comment for usb_start_wait_urb()), except that it always uses a killable wait and it uses GFP_KERNEL rather than GFP_NOIO.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-devel | Sep 26, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Oct 9, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-toolsUpgrade perfUpgrade kernel-rt-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules | Oct 2, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade kernel-rt-vdsoUpgrade kernel-azureUpgrade kernel-source-azureUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade cluster-md-kmp-azureUpgrade kernel-devel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-azure-extra | Aug 9, 2024 | Jun 19, 2024 |
| Ubuntu | — | No solution existsUpgrade linux-azure-fde-5.15 | Jun 26, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub