CVE-2024-42226

216.73.217.64

· Published 30/07/2024 08:15 · Modified 30/07/2024 20:12

Labels: CVE-2024-42226 2024-07-30 416baaa9-dc9f-4396-8d5f-8c081fb06d67 CVE-2024-42226 CWE-476

Essential information

Published: 30/07/2024 08:15
Modified: 30/07/2024 20:12
Author: —
Creator: —
CVSS: 4.6 MEDIUM (v3.1)
CISA KEV: No
CWE: —
CVSS vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS metrics

Description

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB Some transfer events don't always point to a TRB, and consequently don't have a endpoint ring. In these cases, function handle_tx_event() should not proceed, because if 'ep->skip' is set, the pointer to the endpoint ring is used. To prevent a potential failure and make the code logical, return after checking the completion code for a Transfer event without TRBs.

NVD status

Status: Undergoing Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
NVD: View on NVD

Affected products (CPE)

Product	CPE
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel::::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel::::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel::::::::`