CVE-2023-52898

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a null pointer dereference in the Linux kernel's xhci component. This occurs when the xhci free dev() and xhci kill endpoint urbs() functions race and cause a null pointer dereference when the host suddenly dies. The USB core may call xhci free dev(), which frees the xhci->devs[slot id] virt device, at the same time that xhci kill endpoint urbs() tries to loop through all the device's endpoints, checking for any cancelled urbs left to give back. To fix this, the xhci spinlock is held while freeing the virt device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.