In the Linux kernel, the following vulnerability has been resolved:
phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
If the external phy working together with phy-omap-usb2 does not implement send_srp(), we may still attempt to call it. This can happen on an idle Ethernet gadget triggering a wakeup for example:
configfs-gadget.g1 gadget.0: ECM Suspend configfs-gadget.g1 gadget.0: Port suspended. Triggering wakeup ... Unable to handle kernel NULL pointer dereference at virtual address 00000000 when execute ... PC is at 0x0 LR is at musb_gadget_wakeup+0x1d4/0x254 [musb_hdrc] ... musb_gadget_wakeup [musb_hdrc] from usb_gadget_wakeup+0x1c/0x3c [udc_core] usb_gadget_wakeup [udc_core] from eth_start_xmit+0x3b0/0x3d4 [u_ether] eth_start_xmit [u_ether] from dev_hard_start_xmit+0x94/0x24c dev_hard_start_xmit from sch_direct_xmit+0x104/0x2e4 sch_direct_xmit from __dev_queue_xmit+0x334/0xd88 __dev_queue_xmit from arp_solicit+0xf0/0x268 arp_solicit from neigh_probe+0x54/0x7c neigh_probe from __neigh_event_send+0x22c/0x47c __neigh_event_send from neigh_resolve_output+0x14c/0x1c0 neigh_resolve_output from ip_finish_output2+0x1c8/0x628 ip_finish_output2 from ip_send_skb+0x40/0xd8 ip_send_skb from udp_send_skb+0x124/0x340 udp_send_skb from udp_sendmsg+0x780/0x984 udp_sendmsg from __sys_sendto+0xd8/0x158 __sys_sendto from ret_fast_syscall+0x0/0x58
Let's fix the issue by checking for send_srp() and set_vbus() before calling them. For USB peripheral only cases these both could be NULL.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade rtlaUpgrade kernel-rt-debug-coreUpgrade kernel-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-64k-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-64k-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-64k-debugUpgrade kernel-rt-modules-extraUpgrade kernel-64kUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade rvUpgrade kernel-rt-modules-coreUpgrade kernel-64k-coreUpgrade kernel-rtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-64k-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-devel-matched | Sep 26, 2024 | Feb 26, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Feb 26, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 24, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | Feb 26, 2024 |
| Rocky_linux | — | Upgrade kernel-zfcpdumpUpgrade perf-debuginfoUpgrade kernel-debug-coreUpgrade rvUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-develUpgrade libperfUpgrade rtlaUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-kvmUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade libperf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libs | Aug 22, 2024 | Feb 26, 2024 |
| Suse | — | Upgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade dtb-amlogicUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade dtb-apmUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-debugUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-baseUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-rt-optionalUpgrade kernel-default-manUpgrade kernel-azure-extraUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-azure-vdsoUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade kernel-preempt-develUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-azureUpgrade dtb-rockchipUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-amazonUpgrade kernel-devel-rtUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kselftests-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-preemptUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade kernel-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-develUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmallUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade kernel-rtUpgrade dtb-mediatek | Mar 19, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1180-azureUpgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-4.15.0-1165-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-nvidiaUpgrade linux-image-4.15.0-228-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-5.4.0-1036-iotUpgrade linux-image-intelUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1124-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1134-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-gkeopUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-5.4.0-1129-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.5.0-1024-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.5.0-44-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-nvidia-6.5Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-228-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-aws-lts-18.04Upgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-4.15.0-1155-kvmUpgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-4.15.0-1172-awsUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-106-genericUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-5.4.0-181-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-starfiveUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azure-cvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-6.1.0-1035-oem | Mar 12, 2024 | Feb 26, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub