CVE-2024-26964

2024-05-0100:00:00

ubuntu.com

linux

usb

xhci

vulnerability

kernel

error handling

memcpy

AI Score

6.6

Confidence

High

EPSS

Percentile

10.3%

JSON

In the Linux kernel, the following vulnerability has been resolved: usb:
xhci: Add error handling in xhci_map_urb_for_dma Currently
xhci_map_urb_for_dma() creates a temporary buffer and copies the SG list to
the new linear buffer. But if the kzalloc_node() fails, then the following
sg_pcopy_to_buffer() can lead to crash since it tries to memcpy to NULL
pointer. So return -ENOMEM if kzalloc returns null pointer.

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlinux< 5.15.0-116.126UNKNOWN
ubuntu24.04noarchlinux< 6.8.0-35.35UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1065.71UNKNOWN
ubuntu24.04noarchlinux-aws< 6.8.0-1009.9UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1065.71~20.04.1UNKNOWN
ubuntu22.04noarchlinux-aws-6.5< anyUNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1068.77UNKNOWN
ubuntu24.04noarchlinux-azure< 6.8.0-1008.8UNKNOWN
ubuntu20.04noarchlinux-azure-5.15< 5.15.0-1068.77~20.04.1UNKNOWN
ubuntu22.04noarchlinux-azure-6.5< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	22.04	noarch	linux	< 5.15.0-116.126	UNKNOWN
ubuntu	24.04	noarch	linux	< 6.8.0-35.35	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1065.71	UNKNOWN
ubuntu	24.04	noarch	linux-aws	< 6.8.0-1009.9	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1065.71~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-aws-6.5	< any	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< 5.15.0-1068.77	UNKNOWN
ubuntu	24.04	noarch	linux-azure	< 6.8.0-1008.8	UNKNOWN
ubuntu	20.04	noarch	linux-azure-5.15	< 5.15.0-1068.77~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure-6.5	< any	UNKNOWN