In the Linux kernel, the following vulnerability has been resolved:
usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup()
If xhci_mem_init() fails, it calls into xhci_mem_cleanup() to mop up the damage. If it fails early enough, before xhci->interrupters is allocated but after xhci->max_interrupters has been set, which happens in most (all?) cases, things get uglier, as xhci_mem_cleanup() unconditionally derefences xhci->interrupters. With prejudice.
Gate the interrupt freeing loop with a check on xhci->interrupters being non-NULL.
Found while debugging a DMA allocation issue that led the XHCI driver on this exact path.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 11, 2024 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-devel | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-gcpUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k | Dec 13, 2024 | Sep 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub