CVE - CVE-2024-42226

CVE-ID
CVE-2024-42226	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB Some transfer events don't always point to a TRB, and consequently don't have a endpoint ring. In these cases, function handle_tx_event() should not proceed, because if 'ep->skip' is set, the pointer to the endpoint ring is used. To prevent a potential failure and make the code logical, return after checking the completion code for a Transfer event without TRBs.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/1f4a10cb826fdec5cd442df010bcb3043bfd6464 URL:https://git.kernel.org/stable/c/1f4a10cb826fdec5cd442df010bcb3043bfd6464 MISC:https://git.kernel.org/stable/c/66cb618bf0bb82859875b00eeffaf223557cb416 URL:https://git.kernel.org/stable/c/66cb618bf0bb82859875b00eeffaf223557cb416 MISC:https://git.kernel.org/stable/c/69bed24c82139bbad0a78a075e1834a2ea7bd064 URL:https://git.kernel.org/stable/c/69bed24c82139bbad0a78a075e1834a2ea7bd064 MISC:https://git.kernel.org/stable/c/948554f1bb16e15b90006c109c3a558c66d4c4ac URL:https://git.kernel.org/stable/c/948554f1bb16e15b90006c109c3a558c66d4c4ac MISC:https://git.kernel.org/stable/c/9a24eb8010c2dc6a2eba56e3eb9fc07d14ffe00a URL:https://git.kernel.org/stable/c/9a24eb8010c2dc6a2eba56e3eb9fc07d14ffe00a MISC:https://git.kernel.org/stable/c/c0ee01e8ba19ff7edc98f68a114d4789faa219b9 URL:https://git.kernel.org/stable/c/c0ee01e8ba19ff7edc98f68a114d4789faa219b9
Assigning CNA
kernel.org
Date Record Created
20240730	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240730)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)