USB Gadget Panics on 10Gbps Cabling in Linux Kernel
Summary
GSD-2021-1000846: usb: fix various gadget panics on 10gbps cabling. Affects Kernel versions < fd24be23abf3e94260be0f00bb42c7e91d495f87. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for hardware abstraction, process management, memory management, and device drivers. USB (Universal Serial Bus) is a common interface used for connecting peripherals to computers. The USB gadget subsystem in the Linux Kernel allows the system to act as a USB device. However, a vulnerability has been identified in the USB gadget subsystem that can lead to panics when using 10Gbps cabling.
Vulnerability Detail
The vulnerability in the USB gadget subsystem of the Linux Kernel can result in panics when 10Gbps cabling is used. Panics are severe errors that cause the system to halt, leading to a loss of service and potential data corruption. The exact cause and impact of the vulnerability have not been fully determined, but it poses a risk to systems utilizing the USB gadget functionality with high-speed 10Gbps cabling. The vulnerability has been addressed in the Linux Kernel version v4.9.273 through a specific commit (fd24be23abf3e94260be0f00bb42c7e91d495f87).
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The USB gadget subsystem vulnerability in the Linux Kernel can lead to system panics when using 10Gbps cabling. It is crucial to update the Linux Kernel to version v4.9.273 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can result in system panics, causing a loss of service and potential data corruption.
Systems running the Linux Kernel with the USB gadget subsystem and utilizing 10Gbps cabling are affected.
No known exploit has been reported for this vulnerability at the time of this report.
The recommended mitigation is to update the Linux Kernel to the fixed version v4.9.273 or later.
Yes, you can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability without requiring access to the code or installation. Simply upload your package-lock.json file to the Vulert Playground for real-time monitoring and alerts.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
