In the Linux kernel, the following vulnerability has been resolved:
xhci: handle isoc Babble and Buffer Overrun events properly
xHCI 4.9 explicitly forbids assuming that the xHC has released its ownership of a multi-TRB TD when it reports an error on one of the early TRBs. Yet the driver makes such assumption and releases the TD, allowing the remaining TRBs to be freed or overwritten by new TDs.
The xHC should also report completion of the final TRB due to its IOC flag being set by us, regardless of prior errors. This event cannot be recognized if the TD has already been freed earlier, resulting in "Transfer event TRB DMA ptr not part of current TD" error message.
Fix this by reusing the logic for processing isoc Transaction Errors. This also handles hosts which fail to report the final completion.
Fix transfer length reporting on Babble errors. They may be caused by device malfunction, no guarantee that the buffer has been filled.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debugUpgrade kernel-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-rt-kvmUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-modulesUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel | Jun 6, 2024 | Apr 2, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.152-100.162Upgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfo | Aug 28, 2024 | Apr 2, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.82-99.168 | Feb 17, 2025 | Apr 2, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perf | Jun 26, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 8, 2024 | Apr 2, 2024 |
| Oracle_linux | — | Upgrade kernel | Jun 6, 2024 | Apr 2, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jun 6, 2024 | Apr 2, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade perfUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-debug-core | Jun 17, 2024 | Apr 2, 2024 |
| Suse | — | Upgrade kernel-rt-livepatchUpgrade kernel-default-baseUpgrade kselftests-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade kernel-rt-livepatch-develUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade kernel-rtUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-baseUpgrade dtb-renesasUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-appleUpgrade kernel-source-azureUpgrade kernel-debugUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade dtb-apmUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-default-develUpgrade kernel-sourceUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade kernel-devel-azureUpgrade kernel-debug-develUpgrade dtb-exynosUpgrade kernel-rt_debugUpgrade gfs2-kmp-azureUpgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-default-vdso | Apr 18, 2024 | Apr 2, 2024 |
| Ubuntu | — | Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-azureUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-ibmUpgrade linux-image-intelUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1024-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-aws-lts-22.04 | Jul 1, 2024 | Apr 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub