Описание
In the Linux kernel, the following vulnerability has been resolved:
usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
Some transfer events don't always point to a TRB, and consequently don't have a endpoint ring. In these cases, function handle_tx_event() should not proceed, because if 'ep->skip' is set, the pointer to the endpoint ring is used.
To prevent a potential failure and make the code logical, return after checking the completion code for a Transfer event without TRBs.
In the Linux kernel, the following vulnerability has been resolved:
usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
Some transfer events don't always point to a TRB, and consequently don't have a endpoint ring. In these cases, function handle_tx_event() should not proceed, because if 'ep->skip' is set, the pointer to the endpoint ring is used.
To prevent a potential failure and make the code logical, return after checking the completion code for a Transfer event without TRBs.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2024-42226
- https://git.kernel.org/stable/c/1f4a10cb826fdec5cd442df010bcb3043bfd6464
- https://git.kernel.org/stable/c/66cb618bf0bb82859875b00eeffaf223557cb416
- https://git.kernel.org/stable/c/69bed24c82139bbad0a78a075e1834a2ea7bd064
- https://git.kernel.org/stable/c/948554f1bb16e15b90006c109c3a558c66d4c4ac
- https://git.kernel.org/stable/c/9a24eb8010c2dc6a2eba56e3eb9fc07d14ffe00a
- https://git.kernel.org/stable/c/c0ee01e8ba19ff7edc98f68a114d4789faa219b9
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB Some transfer events don't always point to a TRB, and consequently don't have a endpoint ring. In these cases, function handle_tx_event() should not proceed, because if 'ep->skip' is set, the pointer to the endpoint ring is used. To prevent a potential failure and make the code logical, return after checking the completion code for a Transfer event without TRBs.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
