Command Ring Pointer Corruption Vulnerability in xhci
Summary
UVI-2021-1001974: xhci: Fix command ring pointer corruption while aborting a command. Affects Kernel versions < 62c182b5e763e5f4062e72678e72ce3e02dd4d1b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The xhci package is a component of the Linux Kernel that provides support for USB 3.0 and later versions. It includes a host controller driver that manages USB devices connected to the system. The command ring is a data structure used by the xhci driver to issue commands to USB devices. This vulnerability in the xhci driver can lead to command ring pointer corruption when aborting a command.
Vulnerability Detail
The vulnerability arises when aborting a command in the xhci driver, causing corruption of the command ring pointer. This corruption can result in various security issues, including potential privilege escalation or denial of service attacks. An attacker may be able to exploit this vulnerability to execute arbitrary code or crash the system. The vulnerability has been fixed in Linux Kernel version v4.19.213 by commit 62c182b5e763e5f4062e72678e72ce3e02dd4d1b.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. It is essential to update the Linux Kernel to the patched version as soon as possible.
Conclusion
The command ring pointer corruption vulnerability in the xhci driver of the Linux Kernel can have severe security implications, including privilege escalation and denial of service attacks. It is crucial to update the Linux Kernel to version v4.19.213 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can potentially lead to privilege escalation or denial of service attacks. An attacker may be able to execute arbitrary code or crash the system.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. It analyzes the manifest file (e.g., package-lock.json) of your application and provides real-time alerts for open-source vulnerabilities.
At the time of this report, there is no known public exploit for this vulnerability. However, it is crucial to update the Linux Kernel to the patched version to mitigate any potential risks.
Unfortunately, there are no specific temporary measures or workarounds available for this vulnerability. It is highly recommended to update the Linux Kernel as soon as possible.
You can find more information about the fix for this vulnerability in the Linux Kernel repository. The specific commit that addresses this issue is 62c182b5e763e5f4062e72678e72ce3e02dd4d1b.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
