Critical Vulnerability in Linux Kernel: USB xHCI Stopped Event Handling Flaw
Summary
DEBIAN-CVE-2025-22023: In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Don't skip on Stopped - Length Invalid Up until commit d56b0b2ab142 ("usb: xhci: ensure skipped isoc TDs are returned when isoc ring is stopp... Affects linux versions < 6.12.22-1. Fixed in 6.12.22-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, managing hardware and system resources. It provides essential services for all other software running on the system. The kernel is known for its robustness and flexibility, but like any complex software, it can have vulnerabilities. This specific vulnerability affects the USB xHCI (eXtensible Host Controller Interface) driver, which is responsible for managing USB devices and ensuring proper data transfer. The flaw can lead to potential data loss and undefined behavior in certain scenarios.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the USB xHCI driver related to the handling of Stopped and Stopped - Length Invalid events. Prior to commit d56b0b2ab142, the driver incorrectly cleared the skip flag for missed isochronous Transfer Descriptors (TDs) when these events occurred. This could cause the isochronous ring to become stuck, as missed TDs would not be properly removed from the queue. Although this issue has been present for over a decade, it poses a risk of data loss and potential use-after-free (UAF) conditions in hardware. The patch aims to prevent skipping TDs on these events, thus mitigating the risk of data loss.
How To Fix
Minimum fixed version
6.12.22-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, users are advised to monitor their systems for unusual behavior and apply the patch as soon as it is available.
Conclusion
The identified vulnerability in the Linux kernel's USB xHCI driver highlights the importance of maintaining up-to-date software to mitigate risks. Users are encouraged to apply the available patch to protect their systems from potential data loss and instability. Regular monitoring and updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves improper handling of USB xHCI Stopped events, which can lead to data loss and undefined behavior.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Failure to address this vulnerability may result in data loss and potential system instability due to the improper handling of USB data transfers.
While the vulnerability is rare, it poses a risk of exploitation in specific scenarios, particularly involving isochronous data transfers.
It is recommended to regularly check for updates and apply them promptly to ensure your system is secure against known vulnerabilities.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
