In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: Wait unconditionally after issuing EndXfer command
Currently all controller IP/revisions except DWC3_usb3 >= 310a wait 1ms unconditionally for ENDXFER completion when IOC is not set. This is because DWC_usb3 controller revisions >= 3.10a supports GUCTL2[14: Rst_actbitlater] bit which allows polling CMDACT bit to know whether ENDXFER command is completed.
Consider a case where an IN request was queued, and parallelly soft_disconnect was called (due to ffs_epfile_release). This eventually calls stop_active_transfer with IOC cleared, hence send_gadget_ep_cmd() skips waiting for CMDACT cleared during EndXfer. For DWC3 controllers with revisions >= 310a, we don't forcefully wait for 1ms either, and we proceed by unmapping the requests. If ENDXFER didn't complete by this time, it leads to SMMU faults since the controller would still be accessing those requests.
Fix this by ensuring ENDXFER completion by adding 1ms delay in __dwc3_stop_active_transfer() unconditionally.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 18, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Dec 5, 2024 | Jun 18, 2024 |
| Suse | — | Upgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade dtb-armUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade kernel-default-vdsoUpgrade kernel-sourceUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-64kbUpgrade kernel-default-optionalUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kernel-debug-livepatch-develUpgrade dtb-apmUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-devel-azureUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qa | Jul 23, 2024 | Jun 18, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-40-lowlatency-64k | Aug 9, 2024 | Jun 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub