In the Linux kernel, the following vulnerability has been resolved:
USB: core: Fix access violation during port device removal
Testing with KASAN and syzkaller revealed a bug in port.c:disable_store(): usb_hub_to_struct_hub() can return NULL if the hub that the port belongs to is concurrently removed, but the function does not check for this possibility before dereferencing the returned value.
It turns out that the first dereference is unnecessary, since hub->intfdev is the parent of the port device, so it can be changed easily. Adding a check for hub == NULL prevents further problems.
The same bug exists in the disable_show() routine, and it can be fixed the same way.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-debugUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-core | Aug 12, 2024 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.91-99.172Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-static | Feb 17, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 30, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 12, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvm | Aug 22, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kernel-rt-vdsoUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-source-azureUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kernel-azureUpgrade kernel-macrosUpgrade dtb-armUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade dtb-apmUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade dtb-caviumUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade kernel-source-rtUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade dtb-appleUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-rt-livepatch-develUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade kernel-azure-extra | Jun 13, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-nvidia-64k | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub