In the Linux kernel, the following vulnerability has been resolved:
USB: core: Fix access violation during port device removal
Testing with KASAN and syzkaller revealed a bug in port.c:disable_store(): usb_hub_to_struct_hub() can return NULL if the hub that the port belongs to is concurrently removed, but the function does not check for this possibility before dereferencing the returned value.
It turns out that the first dereference is unnecessary, since hub->intfdev is the parent of the port device, so it can be changed easily. Adding a check for hub == NULL prevents further problems.
The same bug exists in the disable_show() routine, and it can be fixed the same way.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade perfUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel | Aug 12, 2024 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.91-99.172Upgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-modules-extra-common | Feb 17, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 12, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade perfUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64 | Aug 22, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade dtb-amazonUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-symsUpgrade dtb-broadcomUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-optionalUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade kernel-debugUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade kernel-azure-optionalUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade dtb-apmUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-lgUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-azureUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade dlm-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade kernel-syms-azure | Jun 13, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-40-lowlatency-64k | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub