PT-2022-35625 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: A potential memory leak issue was identified in the xhci alloc stream info function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-35261 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: A potential memory leak issue exists in the xhci alloc stream info function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-35222 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.77 Description: The issue is related to the xhci component, specifically concerning the removal of device endpoints from the bandwidth list when freeing the device. The actual impact and attack plausibilit...

Denial Of Service (DoS)

qemu is vulnerable to denial of service. The vulnerability exists due to an infinite loop in USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring...

GSD-2022-1004987 xhci: Fix null pointer dereference in remove if xHC has only one roothub

xhci: Fix null pointer dereference in remove if xHC has only one roothub This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...

PT-2022-33494 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a potential NULL dereference in the xhci plat remove function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

CVE-2020-14394

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service...

Cross site request forgery (csrf)

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service...

CVE-2020-14394

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service...

CVE-2020-14394: Loop with Unreachable Exit Condition

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service...

CVE-2020-14394

CVE-2020-14394 is an issue in QEMU where the USB xHCI controller emulation can enter an infinite loop while computing the length of the TRB Ring, allowing a privileged guest to hang the host QEMU process (DoS). Affected component: QEMU’s USB xHCI controller emulation; root cause: incorrect handli...

CVE-2020-14394

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service...

CVE-2020-14394

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service...

PT-2022-7373

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring, allowing a privileged guest user to hang the QEMU process on the...

GSD-2022-1000946 xhci: Prevent futile URB re-submissions due to incorrect return value.

xhci: Prevent futile URB re-submissions due to incorrect return value. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.304 by commit...

GSD-2022-1000927 xhci: Prevent futile URB re-submissions due to incorrect return value.

xhci: Prevent futile URB re-submissions due to incorrect return value. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.269 by commit...

GSD-2022-1000882 xhci: Prevent futile URB re-submissions due to incorrect return value.

xhci: Prevent futile URB re-submissions due to incorrect return value. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.182 by commit...

GSD-2022-1000849 xhci: Prevent futile URB re-submissions due to incorrect return value.

xhci: Prevent futile URB re-submissions due to incorrect return value. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000795 xhci: Prevent futile URB re-submissions due to incorrect return value.

xhci: Prevent futile URB re-submissions due to incorrect return value. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.26 by commit...

GSD-2022-1000727 xhci: Prevent futile URB re-submissions due to incorrect return value.

xhci: Prevent futile URB re-submissions due to incorrect return value. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...