Vulnerability in Kernel package: Stop setting the ACPI companion in usb: dwc3: host
Summary
GSD-2022-1002899: usb: dwc3: host: Stop setting the ACPI companion. Affects Kernel versions < d7f35934f7ab67bfd9adabc84207e59da9c19108. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a fundamental component of the Linux operating system. It provides the core functionality and interfaces for various hardware devices and software components. The usb: dwc3: host module within the Kernel package is responsible for managing USB host controllers. It allows communication between the system and connected USB devices. However, a vulnerability has been identified in the usb: dwc3: host module, specifically related to the setting of the ACPI companion.
Vulnerability Detail
The vulnerability in the usb: dwc3: host module involves the improper setting of the ACPI companion. This issue could potentially be exploited by an attacker to gain unauthorized access or execute arbitrary code on the affected system. The exact impact and attack vectors have not been proven yet. It is important to note that this vulnerability has been fixed in the Linux Kernel version v5.17.15 through the commit d7f35934f7ab67bfd9adabc84207e59da9c19108.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
In conclusion, the Kernel package is vulnerable to an issue in the usb: dwc3: host module related to the setting of the ACPI companion. This vulnerability has been fixed in the Linux Kernel version v5.17.15. It is recommended to update the Kernel package to the fixed version or apply the relevant commit to ensure the security of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel package is a crucial component of the Linux operating system, providing core functionality and interfaces for hardware devices and software components.
The usb: dwc3: host module is responsible for managing USB host controllers, enabling communication between the system and connected USB devices.
The impact of this vulnerability is not yet proven, but it could potentially allow unauthorized access or arbitrary code execution on the affected system.
Yes, this vulnerability has been fixed in the Linux Kernel version v5.17.15 through the commit d7f35934f7ab67bfd9adabc84207e59da9c19108.
To update the Kernel package, follow the official update process provided by your Linux distribution. Alternatively, manually apply the commit d7f35934f7ab67bfd9adabc84207e59da9c19108 to the Kernel source code and rebuild the Kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
