In the Linux kernel, the following vulnerability has been resolved:
USB: core: Fix access violation during port device removal
Testing with KASAN and syzkaller revealed a bug in port.c:disable_store(): usb_hub_to_struct_hub() can return NULL if the hub that the port belongs to is concurrently removed, but the function does not check for this possibility before dereferencing the returned value.
It turns out that the first dereference is unnecessary, since hub->intfdev is the parent of the port device, so it can be changed easily. Adding a check for hub == NULL prevents further problems.
The same bug exists in the disable_show() routine, and it can be fixed the same way.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-rt-kvmUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-devel | Aug 12, 2024 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.91-99.172Upgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf | Feb 17, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 12, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvm | Aug 22, 2024 | May 30, 2024 |
| Suse | — | Upgrade dtb-appleUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-vdsoUpgrade dtb-sprdUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade dtb-marvellUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-amdUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-rt-livepatch-develUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-baseUpgrade kselftests-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade gfs2-kmp-defaultUpgrade kernel-macrosUpgrade dtb-rockchipUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade kernel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade dtb-apmUpgrade ocfs2-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade dtb-armUpgrade dtb-amlogicUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade kernel-devel-rt | Jun 13, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-genericUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1008-gke | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub