In the Linux kernel, the following vulnerability has been resolved:
USB: hub: Ignore non-compliant devices with too many configs or interfaces
Robert Morris created a test program which can cause usb_hub_to_struct_hub() to dereference a NULL or inappropriate pointer:
Oops: general protection fault, probably for non-canonical address 0xcccccccccccccccc: 0000 [#1] SMP DEBUG_PAGEALLOC PTI CPU: 7 UID: 0 PID: 117 Comm: kworker/7:1 Not tainted 6.13.0-rc3-00017-gf44d154d6e3d #14 Hardware name: FreeBSD BHYVE/BHYVE, BIOS 14.0 10/17/2021 Workqueue: usb_hub_wq hub_event RIP: 0010:usb_hub_adjust_deviceremovable+0x78/0x110 ... Call Trace: <TASK> ? die_addr+0x31/0x80 ? exc_general_protection+0x1b4/0x3c0 ? asm_exc_general_protection+0x26/0x30 ? usb_hub_adjust_deviceremovable+0x78/0x110 hub_probe+0x7c7/0xab0 usb_probe_interface+0x14b/0x350 really_probe+0xd0/0x2d0 ? __pfx___device_attach_driver+0x10/0x10 __driver_probe_device+0x6e/0x110 driver_probe_device+0x1a/0x90 __device_attach_driver+0x7e/0xc0 bus_for_each_drv+0x7f/0xd0 __device_attach+0xaa/0x1a0 bus_probe_device+0x8b/0xa0 device_add+0x62e/0x810 usb_set_configuration+0x65d/0x990 usb_generic_driver_probe+0x4b/0x70 usb_probe_device+0x36/0xd0
The cause of this error is that the device has two interfaces, and the hub driver binds to interface 1 instead of interface 0, which is where usb_hub_to_struct_hub() looks.
We can prevent the problem from occurring by refusing to accept hub devices that violate the USB spec by having more than one configuration or interface.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade python-perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.179-121.185Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.235-227.919Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-devel | May 22, 2025 | Feb 27, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.129-138.220Upgrade kernel-libbpf-develUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-modules-extra | Jun 11, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Mar 17, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jun 13, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Jun 11, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Jul 1, 2025 | Feb 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade kernel-syms-rtUpgrade dtb-armUpgrade dtb-amazonUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade dtb-appleUpgrade dtb-lgUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-manUpgrade kernel-devel-rtUpgrade dtb-apmUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade dtb-exynosUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-amdUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade dtb-amlogicUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-rtUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-64kb | Apr 9, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-5.4.0-1120-fipsUpgrade linux-image-5.4.0-1105-bluefieldUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-5.4.0-1151-azureUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.4.0-1149-gcp-fipsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-awsUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-realtimeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-5.4.0-1051-iotUpgrade linux-image-generic-6.8Upgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-gke-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1151-azure-fipsUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-5.4.0-1064-xilinx-zynqmpUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1035-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-140-fipsUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-6.8Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-5.15.0-1089-azureUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-5.4.0-1146-aws-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-5.4.0-1144-oracleUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-5.4.0-216-generic-lpaeUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.4.0-216-genericUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-gcp-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.4.0-1146-awsUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-5.4.0-1149-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-oemUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-intelUpgrade linux-image-5.4.0-216-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1084-awsUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1092-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-5.4.0-1133-kvm | May 20, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub