USB MUSB DSPS Probe Error Path Vulnerability in Kernel
Summary
UVI-2021-1001909: usb: musb: dsps: Fix the probe error path. Affects Kernel versions >= 72bb3eafcfdd156713a3ea0c9c95d536bd6e6e55, < ff9249aab39820be11b6975a10d94253b7d426fc. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionality and acts as a bridge between hardware and software. It manages system resources, facilitates communication between different software components, and ensures the stability and security of the system. The USB subsystem in the Kernel enables the use of USB devices and provides drivers for various USB controllers. One such controller is the MUSB (Multi-Role/Single-Role USB) controller, which is commonly used in embedded systems. The DSPS (Dual-Role Port Support) feature in the MUSB controller allows it to function as both a host and a device. However, a vulnerability has been discovered in the probe error path of the MUSB DSPS driver, which could potentially be exploited by an attacker to cause a denial-of-service (DoS) condition or execute arbitrary code.
Vulnerability Detail
The vulnerability in the MUSB DSPS probe error path arises due to improper error handling during the initialization process. When the driver encounters an error while probing the DSPS feature, it fails to properly clean up allocated resources, leading to a resource leak. This resource leak can be exploited by an attacker to exhaust system resources, resulting in a DoS condition. Additionally, if an attacker can control the error condition, they may be able to execute arbitrary code with elevated privileges. The impact and attack plausibility of this vulnerability have not been proven yet, but it is important to address it to ensure the security and stability of systems utilizing the affected Kernel versions.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the MUSB DSPS feature if it is not required for their system. This can be achieved by modifying the Kernel configuration and disabling the corresponding driver. However, this workaround should only be considered if the DSPS feature is not essential, as it may impact the functionality of USB devices that rely on this feature. Here is an example of how to disable the MUSB DSPS feature in the Kernel configuration:
- Open the Kernel configuration file (usually located at /usr/src/linux/.config).
- Search for the configuration option related to the MUSB DSPS driver (e.g., CONFIG_USB_MUSB_DSPS).
- Change the value of the configuration option to 'n' to disable the driver.
- Save the configuration file and rebuild the Kernel with the updated configuration.
- Install the updated Kernel and reboot the system for the changes to take effect.
Conclusion
The USB MUSB DSPS probe error path vulnerability in the Kernel can potentially lead to a denial-of-service condition or arbitrary code execution. It is crucial to update the Linux Kernel to version v5.14.14 or later to mitigate this vulnerability. As a temporary workaround, disabling the MUSB DSPS feature can be considered if it is not essential for the system. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can range from a denial-of-service (DoS) condition, where an attacker can exhaust system resources, to the execution of arbitrary code with elevated privileges if the error condition can be controlled.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. The Vulert Playground allows you to analyze your software's manifest file (e.g., package-lock.json) and provides real-time monitoring and alerts for open-source vulnerabilities.
Yes, a temporary workaround is to disable the MUSB DSPS feature in the Kernel configuration if it is not required for your system. However, this workaround should only be considered if the DSPS feature is not essential, as it may impact the functionality of USB devices that rely on this feature.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.14.14 or later. Follow the official documentation and best practices for updating the Kernel on your specific Linux distribution.
You can find more information about this vulnerability in the Open Source Vulnerability database maintained by the Cloud Security Alliance. The vulnerability details can be accessed at the following link: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1001xxx/UVI-2021-1001909.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
