In the Linux kernel, the following vulnerability has been resolved:
usb: xhci: Fix invalid pointer dereference in Etron workaround
This check is performed before prepare_transfer() and prepare_ring(), so enqueue can already point at the final link TRB of a segment. And indeed it will, some 0.4% of times this code is called.
Then enqueue + 1 is an invalid pointer. It will crash the kernel right away or load some junk which may look like a link TRB and cause the real link TRB to be replaced with a NOOP. This wouldn't end well.
Use a functionally equivalent test which doesn't dereference the pointer and always gives correct result.
Something has crashed my machine twice in recent days while playing with an Etron HC, and a control transfer stress test ran for confirmation has just crashed it again. The same test passes with this patch applied.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel6.12Upgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf6.12Upgrade bpftoolUpgrade kernel-headersUpgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-develUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade perf6.12-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extra-commonUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-libbpf-debuginfo | Jul 11, 2025 | May 8, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 8, 2025 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade kernel-default-vdso | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-virtualUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-raspi-6.8Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-virtual-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidiaUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-kvmUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-genericUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-xilinxUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-gkeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64k | Jun 26, 2025 | May 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub