Kernel - USB DWC3 Core Kernel Panic Vulnerability
Summary
GSD-2021-1001009: usb: dwc3: core: fix kernel panic when do reboot. Affects Kernel versions >= e52d43c82f2f6556f0b7a790c19c072c1e99a95f, < 174c27583b3807ac96228c442735b02622d8d1c3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is the core component of the Linux operating system that manages system resources and provides an interface for software to interact with the hardware. The USB DWC3 (DesignWare USB 3.0 Controller) Core is a part of the Kernel responsible for managing USB 3.0 functionality. It enables communication between USB devices and the host system. This vulnerability in the USB DWC3 Core can lead to a kernel panic when rebooting the system.
Vulnerability Detail
The vulnerability in the USB DWC3 Core occurs when rebooting the system. It can trigger a kernel panic, causing the system to crash. A kernel panic is a situation where the operating system detects an internal error from which it cannot recover, resulting in a system halt. This vulnerability can be exploited by an attacker with local access to the system to cause a denial-of-service (DoS) condition. The vulnerability was introduced in Linux Kernel version v5.10.46 by commit e52d43c82f2f6556f0b7a790c19c072c1e99a95f and fixed in version v5.10.46 by commit 174c27583b3807ac96228c442735b02622d8d1c3.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability.
Conclusion
The USB DWC3 Core vulnerability in the Kernel can lead to a kernel panic and system crash when rebooting. It is recommended to update the Linux Kernel to version v5.10.46 or later to fix this vulnerability. If you need further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to a kernel panic, causing the system to crash and resulting in a denial-of-service (DoS) condition.
An attacker with local access to the system can exploit this vulnerability.
No, remote exploitation is not possible as it requires local access to the system.
The vulnerability was introduced in Linux Kernel version v5.10.46.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and it will provide real-time alerts for open-source vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
