The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: Wait unconditionally after issuing EndXfer command
Currently all controller IP/revisions except DWC3_usb3 >= 310a wait 1ms unconditionally for ENDXFER completion when IOC is not set. This is because DWC_usb3 controller revisions >= 3.10a supports GUCTL2[14: Rst_actbitlater] bit which allows polling CMDACT bit to know whether ENDXFER command is completed.
Consider a case where an IN request was queued, and parallelly soft_disconnect was called (due to ffs_epfile_release). This eventually calls stop_active_transfer with IOC cleared, hence send_gadget_ep_cmd() skips waiting for CMDACT cleared during EndXfer. For DWC3 controllers with revisions >= 310a, we don't forcefully wait for 1ms either, and we proceed by unmapping the requests. If ENDXFER didn't complete by this time, it leads to SMMU faults since the controller would still be accessing those requests.
Fix this by ensuring ENDXFER completion by adding 1ms delay in __dwc3_stop_active_transfer() unconditionally.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 18, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 5, 2024 | Jun 18, 2024 |
| Suse | — | Upgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade kernel-debugUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade dtb-apmUpgrade dtb-appleUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-default-optionalUpgrade dtb-lgUpgrade kernel-macrosUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-marvellUpgrade kselftests-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-develUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade dtb-renesasUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-broadcomUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-azure | Jul 23, 2024 | Jun 18, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-azureUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1008-gke | Aug 9, 2024 | Jun 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 18, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub