CVE-2024-26964: usb: xhci: Add error handling in xhci_map_urb_for_dma
In the Linux kernel, the following vulnerability has been resolved:
usb: xhci: Add error handling in xhcimapurbfordma
Currently xhcimapurbfordma() creates a temporary buffer and copies the SG list to the new linear buffer. But if the kzallocnode() fails, then the following sgpcopytobuffer() can lead to crash since it tries to memcpy to NULL pointer.
So return -ENOMEM if kzalloc returns null pointer.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
usb: xhci: Add error handling in xhcimapurbfordma
The Linux kernel CVE team has assigned CVE-2024-26964 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050130-CVE-2024-26964-54c8@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26964?
CVE-2024-26964 has been classified as a medium severity vulnerability based on its potential impact on system stability.
How do I fix CVE-2024-26964?
To fix CVE-2024-26964, you should upgrade to the kernel versions 5.15.154, 6.1.84, 6.6.24, 6.7.12, 6.8.3, or 6.9 depending on your system.
Which operating systems are affected by CVE-2024-26964?
CVE-2024-26964 affects various Linux distributions that utilize the Linux kernel versions below the specified fixed versions.
What is the impact of CVE-2024-26964 on the Linux kernel?
CVE-2024-26964 may cause inadequate error handling in the Linux kernel's USB subsystem, potentially leading to system instability.
Is CVE-2024-26964 related to any specific Linux kernel components?
Yes, CVE-2024-26964 specifically affects the xHCI USB host controller driver in the Linux kernel.