Vulnerability in Kernel Package: usb: dwc3: host: Stop setting the ACPI companion
Summary
GSD-2022-1002548: usb: dwc3: host: Stop setting the ACPI companion. Affects Kernel versions < 9c185fde906a48368bd2d2a8c17d4b6fb3d670af. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a fundamental component of the Linux operating system, responsible for managing the system's core functionality. It provides an interface between the hardware and software layers, allowing applications to communicate with the underlying hardware. The vulnerability in question affects the usb: dwc3: host module within the Kernel package. This module is responsible for managing USB host functionality on systems with DesignWare USB 3.0 controllers. The vulnerability arises from the improper setting of the ACPI companion, potentially leading to security issues.
Vulnerability Detail
The vulnerability in the usb: dwc3: host module of the Kernel package involves the improper setting of the ACPI companion. This flaw can potentially be exploited by malicious actors to gain unauthorized access or execute arbitrary code on affected systems. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.18.4 by commit 9c185fde906a48368bd2d2a8c17d4b6fb3d670af.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As this vulnerability has been fixed in the latest version of the Kernel package, there is no specific workaround available. It is strongly advised to update to the fixed version to mitigate the vulnerability.
Conclusion
In conclusion, the vulnerability in the usb: dwc3: host module of the Kernel package can potentially lead to unauthorized access or arbitrary code execution. It is crucial to update the Kernel package to version v5.18.4 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel package is a core component of the Linux operating system, responsible for managing the system's core functionality.
The usb: dwc3: host module is a part of the Kernel package that handles USB host functionality on systems with DesignWare USB 3.0 controllers.
The impact of this vulnerability is not yet proven. However, if exploited, it could lead to unauthorized access or arbitrary code execution on affected systems.
Yes, this vulnerability has been fixed in Linux Kernel version v5.18.4 by commit 9c185fde906a48368bd2d2a8c17d4b6fb3d670af.
To update the Kernel package, follow the official update process provided by the Linux distribution being used. Ensure that the updated package is properly installed and all dependencies are resolved.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
