Command Ring Pointer Corruption Vulnerability in xhci
Summary
GSD-2021-1001974: xhci: Fix command ring pointer corruption while aborting a command. Affects Kernel versions < 62c182b5e763e5f4062e72678e72ce3e02dd4d1b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The xhci package is a component of the Linux Kernel that provides support for USB 3.0 and later versions. It implements the eXtensible Host Controller Interface (xHCI) specification, allowing communication between USB devices and the host system. The xhci package is responsible for managing the command ring, which is used to send commands to USB devices. However, a vulnerability has been discovered in the xhci package that can lead to command ring pointer corruption while aborting a command.
Vulnerability Detail
The command ring pointer corruption vulnerability in the xhci package occurs when aborting a command. This vulnerability can be exploited by an attacker to manipulate the command ring pointer, potentially leading to arbitrary code execution or denial of service. The corruption of the command ring pointer can cause the xhci package to execute unintended commands or fail to execute valid commands, compromising the integrity and functionality of the USB subsystem. The vulnerability has been fixed in Linux Kernel version v4.19.213 by commit 62c182b5e763e5f4062e72678e72ce3e02dd4d1b.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.19.213 or later. This can be done by obtaining the updated kernel source code from the official Linux Kernel repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/) and compiling it for the target system. Alternatively, users can wait for their Linux distribution to provide an updated kernel package that includes the fix.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The command ring pointer corruption vulnerability in the xhci package can have serious security implications, potentially allowing arbitrary code execution or denial of service. It is crucial to update the Linux Kernel to the fixed version to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can potentially allow an attacker to execute arbitrary code or cause denial of service by manipulating the command ring pointer in the xhci package.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will analyze the dependencies and alert you if any known vulnerabilities, including this one, are found.
No specific workarounds have been provided for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
Yes, this vulnerability can be exploited remotely if the affected system is accessible over a network and the attacker can send malicious USB commands to the xhci package.
There is no information available regarding active exploitation of this vulnerability in the wild at the time of this report.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.