Draft: CVE-2024-42226 kernel: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (!4945) · Merge requests · Red Hat / centos-stream / src / kernel / centos-stream-9

Desnes Nunes requested to merge desnesn/centos-stream-9:rhel52378 into main Aug 07, 2024

JIRA: https://issues.redhat.com/browse/RHEL-52378 CVE: CVE-2024-42226

This MR fixes a lack of endpoint ring condition at the handle_tx_event() function. This bug can be triggered on transfer events that don't always point to a TRB. Additionally, a few updates from the upstream series to the logic of the handle_tx_event() are also being performed here.

Signed-off-by: Desnes Nunes desnesn@redhat.com

Draft: CVE-2024-42226 kernel: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB

Merge request reports