Vulnerability in Kernel Package: usb: dwc3: core: Do core softreset when switch mode
Summary
GSD-2021-1000056: usb: dwc3: core: Do core softreset when switch mode. Affects Kernel versions >= 41ce1456e1dbbc7355d0fcc10cf7c337c13def24, < 1c10fd60c8595ea7ff7e29d3cf1fa88069941da3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a critical component of the Linux operating system, responsible for managing the system's core functionality. It provides essential services and interfaces for hardware devices, including USB controllers. The vulnerability in the Kernel package affects the usb: dwc3: core module, specifically related to the core softreset when switching modes.
Vulnerability Detail
The vulnerability arises from a missing core softreset when switching modes in the usb: dwc3: core module. This oversight can potentially lead to security issues and system instability. Attackers may exploit this vulnerability to gain unauthorized access, execute arbitrary code, or cause denial-of-service conditions. The vulnerability was introduced in version v4.12 of the Linux Kernel and has been fixed in version v5.12.3.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The vulnerability in the Kernel package's usb: dwc3: core module poses potential security risks and system instability. It is crucial to update the Linux Kernel package to version v5.12.3 or later to mitigate these risks. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can potentially allow attackers to gain unauthorized access, execute arbitrary code, or cause denial-of-service conditions.
The vulnerability was introduced in version v4.12 of the Linux Kernel.
Yes, the vulnerability has been fixed in version v5.12.3 of the Linux Kernel.
You can find more information about the vulnerability in the official Linux Kernel repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
You can use Vulert's playground tool at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will provide real-time monitoring and alerts for open-source vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
