CVE-2024-45027

usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup()

published September 11, 2024

CVSS
—
EPSS
0%
Percentile
10.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup()

If xhci_mem_init() fails, it calls into xhci_mem_cleanup() to mop

up the damage. If it fails early enough, before xhci->interrupters

is allocated but after xhci->max_interrupters has been set, which

happens in most (all?) cases, things get uglier, as xhci_mem_cleanup()

unconditionally derefences xhci->interrupters. With prejudice.

Gate the interrupt freeing loop with a check on xhci->interrupters

being non-NULL.

Found while debugging a DMA allocation issue that led the XHCI driver

on this exact path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.1th percentile
Published
2024-09-11T15:13Z
EPSS history
Timeline
  • 11 SEP 15:13Z
    usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup()
    cvelistv5