CVE-2024-26659: xhci: handle isoc Babble and Buffer Overrun events properly
In the Linux kernel, the following vulnerability has been resolved:
xhci: handle isoc Babble and Buffer Overrun events properly
The Linux kernel CVE team has assigned CVE-2024-26659 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040222-CVE-2024-26659-e4f6@gregkh/T
Other sources
In the Linux kernel, the following vulnerability has been resolved:
xhci: handle isoc Babble and Buffer Overrun events properly
xHCI 4.9 explicitly forbids assuming that the xHC has released its ownership of a multi-TRB TD when it reports an error on one of the early TRBs. Yet the driver makes such assumption and releases the TD, allowing the remaining TRBs to be freed or overwritten by new TDs.
The xHC should also report completion of the final TRB due to its IOC flag being set by us, regardless of prior errors. This event cannot be recognized if the TD has already been freed earlier, resulting in "Transfer event TRB DMA ptr not part of current TD" error message.
Fix this by reusing the logic for processing isoc Transaction Errors. This also handles hosts which fail to report the final completion.
Fix transfer length reporting on Babble errors. They may be caused by device malfunction, no guarantee that the buffer has been filled.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26659?
CVE-2024-26659 has a high severity rating due to potential risks associated with improper handling of isochronous Babble and Buffer Overrun events in the Linux kernel.
How do I fix CVE-2024-26659?
To fix CVE-2024-26659, users should update their Linux kernel to version 5.10.213, 5.15.152, 6.1.82, 6.6.17, 6.7.5, 6.8 or apply other relevant updates provided by their distribution.
Which Linux kernel versions are vulnerable to CVE-2024-26659?
The vulnerable Linux kernel versions include 5.10.x up to 5.10.213, 5.15.x up to 5.15.152, as well as specific versions in the 6.x series prior to the resolution.
What types of systems are affected by CVE-2024-26659?
CVE-2024-26659 affects systems running vulnerable versions of the Linux kernel, typically used in various Linux distributions such as Red Hat and Debian.
Is CVE-2024-26659 related to USB events?
Yes, CVE-2024-26659 specifically addresses vulnerabilities related to the handling of USB isochronous Babble and Buffer Overrun events in the Linux kernel.