CVE-2024-50075

CVE-2024-50075

High · published October 29, 2024

CVSS v3.1
8.0
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

xhci: tegra: fix checked USB2 port number

If USB virtualizatoin is enabled, USB2 ports are shared between all

Virtual Functions. The USB2 port number owned by an USB2 root hub in

a Virtual Function may be less than total USB2 phy number supported

by the Tegra XUSB controller.

Using total USB2 phy number as port number to check all PORTSC values

would cause invalid memory access.

[ 116.923438] Unable to handle kernel paging request at virtual address 006c622f7665642f

...

[ 117.213640] Call trace:

[ 117.216783] tegra_xusb_enter_elpg+0x23c/0x658

[ 117.222021] tegra_xusb_runtime_suspend+0x40/0x68

[ 117.227260] pm_generic_runtime_suspend+0x30/0x50

[ 117.232847] __rpm_callback+0x84/0x3c0

[ 117.237038] rpm_suspend+0x2dc/0x740

[ 117.241229] pm_runtime_work+0xa0/0xb8

[ 117.245769] process_scheduled_works+0x24c/0x478

[ 117.251007] worker_thread+0x23c/0x328

[ 117.255547] kthread+0x104/0x1b0

[ 117.259389] ret_from_fork+0x10/0x20

[ 117.263582] Code: 54000222 f9461ae8 f8747908 b4ffff48 (f9400100)

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00218 · 11.7th percentile
Published
2024-10-29T05:15Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel≥ 6.3, < 6.6.586.6.58
linux/linux_kernel≥ 6.7, < 6.11.56.11.5
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 29 OCT 00:50Z
    xhci: tegra: fix checked USB2 port number
    cvelistv5