CVE-2024-26659

2024-04-0200:00:00

ubuntu.com

linux kernel

xhci

buffer overrun

babble errors

transaction errors

transfer length reporting

device malfunction

AI Score

7.6

Confidence

High

EPSS

Percentile

10.3%

JSON

In the Linux kernel, the following vulnerability has been resolved: xhci:
handle isoc Babble and Buffer Overrun events properly xHCI 4.9 explicitly
forbids assuming that the xHC has released its ownership of a multi-TRB TD
when it reports an error on one of the early TRBs. Yet the driver makes
such assumption and releases the TD, allowing the remaining TRBs to be
freed or overwritten by new TDs. The xHC should also report completion of
the final TRB due to its IOC flag being set by us, regardless of prior
errors. This event cannot be recognized if the TD has already been freed
earlier, resulting in “Transfer event TRB DMA ptr not part of current TD”
error message. Fix this by reusing the logic for processing isoc
Transaction Errors. This also handles hosts which fail to report the final
completion. Fix transfer length reporting on Babble errors. They may be
caused by device malfunction, no guarantee that the buffer has been filled.

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlinux< anyUNKNOWN
ubuntu22.04noarchlinux< 5.15.0-112.122UNKNOWN
ubuntu23.10noarchlinux< 6.5.0-44.44UNKNOWN
ubuntu20.04noarchlinux-aws< anyUNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1063.69UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1063.69~20.04.1UNKNOWN
ubuntu22.04noarchlinux-aws-6.5< 6.5.0-1023.23~22.04.1UNKNOWN
ubuntu20.04noarchlinux-azure< anyUNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1066.75UNKNOWN
ubuntu20.04noarchlinux-azure-5.15< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	linux	< any	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-112.122	UNKNOWN
ubuntu	23.10	noarch	linux	< 6.5.0-44.44	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< any	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1063.69	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1063.69~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-aws-6.5	< 6.5.0-1023.23~22.04.1	UNKNOWN
ubuntu	20.04	noarch	linux-azure	< any	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< 5.15.0-1066.75	UNKNOWN
ubuntu	20.04	noarch	linux-azure-5.15	< any	UNKNOWN