USB Gadget Panics on 10Gbps Cabling in Linux Kernel
Summary
GSD-2021-1000879: usb: fix various gadget panics on 10gbps cabling. Affects Kernel versions < 45f9a2fe737dc0a5df270787f2231aee8985cd59. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is the core component of the Linux operating system, responsible for managing system resources and providing an interface for software to interact with the hardware. USB (Universal Serial Bus) is a widely used interface for connecting devices to computers. The USB Gadget subsystem in the Linux Kernel allows the system to act as a USB device, enabling functionalities such as USB tethering, file transfer, and network emulation. However, a vulnerability has been discovered in the USB Gadget subsystem when using 10Gbps cabling, leading to system panics.
Vulnerability Detail
The vulnerability in the USB Gadget subsystem of the Linux Kernel occurs when 10Gbps cabling is used. It can result in system panics, causing the system to crash and become unresponsive. The exact cause of the panics is not specified in the vulnerability details. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v4.19.195 by commit 45f9a2fe737dc0a5df270787f2231aee8985cd59.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The USB Gadget subsystem in the Linux Kernel is vulnerable to system panics when using 10Gbps cabling. To mitigate this vulnerability, it is crucial to update the Linux Kernel to version v4.19.195 or later. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to system panics, causing the system to crash and become unresponsive.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. It requires no signup and uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities.
No specific workaround is mentioned in the vulnerability details. It is recommended to update the Linux Kernel to the fixed version.
More details about the fix can be found in the commit 45f9a2fe737dc0a5df270787f2231aee8985cd59 in the Linux Kernel repository.
No, the fix is implemented in the updated version of the Linux Kernel. It is necessary to update the kernel to apply the fix.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
