usb: xhci-mtk: Fix list_del warning when enabling list debug
Summary
GSD-2021-1002758: usb: xhci-mtk: fix list_del warning when enable list debug. Affects Kernel versions >= b8731209958a1dffccc2888121f4c0280c990550, < 67cbcd3fb8e6412cc5220315c7266e52c2b66268. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The usb:xhci-mtk package is a component of the Linux Kernel, which is responsible for managing USB devices and their interactions with the system. It provides support for the MediaTek USB xHCI host controller. The xHCI (eXtensible Host Controller Interface) is a standard interface for USB 3.0 and later versions. The xhci-mtk driver specifically handles the MediaTek variant of xHCI host controllers.
Vulnerability Detail
The vulnerability in the usb:xhci-mtk package involves a warning that occurs when enabling list debugging. The list_del function, which is used to remove an entry from a linked list, triggers this warning. The issue was introduced in version v5.15 of the Linux Kernel by commit b8731209958a1dffccc2888121f4c0280c990550. The impact and attack plausibility of this vulnerability have not been proven. However, it is important to address this warning to maintain code integrity and prevent potential issues in the future.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The usb:xhci-mtk package in the Linux Kernel is vulnerable to a warning related to list debugging. To address this vulnerability, it is recommended to update the Linux Kernel to version v5.15.11 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
usb:xhci-mtk is a component of the Linux Kernel that provides support for MediaTek USB xHCI host controllers.
list_del is a function in the Linux Kernel that removes an entry from a linked list.
The impact of this vulnerability is currently unknown, as the actual attack plausibility has not been proven. However, it is important to address this warning to maintain code integrity.
To fix this vulnerability, update the Linux Kernel to version v5.15.11 or later.
You can find more information about this vulnerability in the Open Source Vulnerability Database (OSVDB) entry GSD-2021-1002758.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
