In the Linux kernel, the following vulnerability has been resolved:
USB: core: Fix access violation during port device removal
Testing with KASAN and syzkaller revealed a bug in port.c:disable_store(): usb_hub_to_struct_hub() can return NULL if the hub that the port belongs to is concurrently removed, but the function does not check for this possibility before dereferencing the returned value.
It turns out that the first dereference is unnecessary, since hub->intfdev is the parent of the port device, so it can be changed easily. Adding a check for hub == NULL prevents further problems.
The same bug exists in the disable_show() routine, and it can be fixed the same way.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade python3-perfUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-develUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-headersUpgrade kernel-rt-develUpgrade kernel-modules-extra | Aug 12, 2024 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade perfUpgrade kernel-livepatch-6.1.91-99.172Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade bpftool | Feb 17, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade bpftool-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debug | Aug 22, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade kernel-debugUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-renesasUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-default-develUpgrade dtb-allwinnerUpgrade kernel-debug-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade kernel-obs-qaUpgrade kernel-azureUpgrade cluster-md-kmp-azureUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-amlogicUpgrade dtb-armUpgrade dtb-exynosUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade dtb-mediatekUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade dtb-qcomUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade dtb-apmUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdso | Jun 13, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-azureUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1010-ibm | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub