In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer
Considering that in some extreme cases, when u_serial driver is accessed by multiple threads, Thread A is executing the open operation and calling the gs_open, Thread B is executing the disconnect operation and calling the gserial_disconnect function,The port->port_usb pointer will be set to NULL.
E.g. Thread A Thread B gs_open() gadget_unbind_driver() gs_start_io() composite_disconnect() gs_start_rx() gserial_disconnect() ... ... spin_unlock(&port->port_lock) status = usb_ep_queue() spin_lock(&port->port_lock) spin_lock(&port->port_lock) port->port_usb = NULL gs_free_requests(port->port_usb->in) spin_unlock(&port->port_lock) Crash
This causes thread A to access a null pointer (port->port_usb is null) when calling the gs_free_requests function, causing a crash.
If port_usb is NULL, the release request will be skipped as it will be done by gserial_disconnect.
So add a null pointer check to gs_start_io before attempting to access the value of the pointer port->port_usb.
Call trace: gs_start_io+0x164/0x25c gs_open+0x108/0x13c tty_open+0x314/0x638 chrdev_open+0x1b8/0x258 do_dentry_open+0x2c4/0x700 vfs_open+0x2c/0x3c path_openat+0xa64/0xc60 do_filp_open+0xb8/0x164 do_sys_openat2+0x84/0xf0 __arm64_sys_openat+0x70/0x9c invoke_syscall+0x58/0x114 el0_svc_common+0x80/0xe0 do_el0_svc+0x1c/0x28 el0_svc+0x38/0x68
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 11, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-azure-fipsUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-oracleUpgrade linux-image-raspi2Upgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1029-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-intel-iotgUpgrade linux-image-intelUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-oemUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-nvidia-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-136-genericUpgrade linux-image-gcp-fipsUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1075-intel-iotg | Mar 28, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub