In the Linux kernel, the following vulnerability has been resolved:
USB: core: Fix access violation during port device removal
Testing with KASAN and syzkaller revealed a bug in port.c:disable_store(): usb_hub_to_struct_hub() can return NULL if the hub that the port belongs to is concurrently removed, but the function does not check for this possibility before dereferencing the returned value.
It turns out that the first dereference is unnecessary, since hub->intfdev is the parent of the port device, so it can be changed easily. Adding a check for hub == NULL prevents further problems.
The same bug exists in the disable_show() routine, and it can be fixed the same way.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules | Aug 12, 2024 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade python3-perfUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.91-99.172Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-common | Feb 17, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernelUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64 | Aug 22, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-rt-livepatchUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-macrosUpgrade kernel-rt_debug-develUpgrade dtb-qcomUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade dtb-alteraUpgrade kernel-azure-livepatch-develUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade dtb-lgUpgrade dtb-rockchipUpgrade dtb-apmUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade kernel-zfcpdumpUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade dlm-kmp-azureUpgrade kernel-debug-develUpgrade dtb-appleUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade kernel-default-livepatch | Jun 13, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracle-64k | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub