CVE-2022-48760

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a bug in the Linux kernel's USB core, where processes hang waiting for usb kill urb() to return. This occurs due to memory-access ordering issues on SMP systems, specifically a pattern known as "Store Buffering" (SB), which can cause CPUs to execute reads ahead of writes. The problem arises when the wakeup notification that the URB has completed is not received, leading to a hang in usb kill urb(). The same pattern of accesses occurs in usb poison urb() and the failure pathway of usb hcd submit urb(). The issue is fixed by adding suitable memory barriers to provide proper memory-access ordering.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.