In the Linux kernel, the following vulnerability has been resolved:
usb: xhci: Fix invalid pointer dereference in Etron workaround
This check is performed before prepare_transfer() and prepare_ring(), so enqueue can already point at the final link TRB of a segment. And indeed it will, some 0.4% of times this code is called.
Then enqueue + 1 is an invalid pointer. It will crash the kernel right away or load some junk which may look like a link TRB and cause the real link TRB to be replaced with a NOOP. This wouldn't end well.
Use a functionally equivalent test which doesn't dereference the pointer and always gives correct result.
Something has crashed my machine twice in recent days while playing with an Etron HC, and a control transfer stress test ran for confirmation has just crashed it again. The same test passes with this patch applied.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel6.12-debuginfoUpgrade perf6.12Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12Upgrade bpftoolUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade python3-perf6.12Upgrade python3-perf6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-modules-extra-common | Jul 11, 2025 | May 8, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 8, 2025 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade kernel-default-baseUpgrade kernel-source-azureUpgrade kernel-64kb-extraUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extra | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-kvmUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-azureUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-gcp | Jun 26, 2025 | May 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub