跳转到帖子

Debian: CVE-2023-52898: linux -- security update

recommended_posts

发布于
  • Members

Debian: CVE-2023-52898: linux -- security update

Severity
4
CVSS
(AV:L/AC:M/Au:S/C:N/I:N/A:C)
Published
08/22/2024
Created
08/23/2024
Added
08/22/2024
Modified
01/30/2025

Description

In the Linux kernel, the following vulnerability has been resolved: xhci: Fix null pointer dereference when host dies Make sure xhci_free_dev() and xhci_kill_endpoint_urbs() do not race and cause null pointer dereference when host suddenly dies. Usb core may call xhci_free_dev() which frees the xhci->devs[slot_id] virt device at the same time that xhci_kill_endpoint_urbs() tries to loop through all the device's endpoints, checking if there are any cancelled urbs left to give back. hold the xhci spinlock while freeing the virt device

Solution(s)

  • debian-upgrade-linux

References

  • https://attackerkb.com/topics/cve-2023-52898
  • CVE - 2023-52898
  • 查看数 692
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…