CVE-2024-26964

usb: xhci: Add error handling in xhci_map_urb_for_dma

published May 1, 2024

CVSS
—
EPSS
0%
Percentile
13.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

usb: xhci: Add error handling in xhci_map_urb_for_dma

Currently xhci_map_urb_for_dma() creates a temporary buffer and copies

the SG list to the new linear buffer. But if the kzalloc_node() fails,

then the following sg_pcopy_to_buffer() can lead to crash since it

tries to memcpy to NULL pointer.

So return -ENOMEM if kzalloc returns null pointer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.1th percentile
Published
2024-05-01T05:19Z
EPSS history
Timeline
  • 01 MAY 05:19Z
    usb: xhci: Add error handling in xhci_map_urb_for_dma
    cvelistv5