PT-2025-40657
CVE-2022-50470
·
Published
2022-10-24
·
Updated
2026-10-19
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel related to the handling of device endpoints within the xhci driver. Specifically, the issue arises when freeing a virtual device, potentially leading to a list del corruption kernel crash. This occurs when endpoints are not properly removed from the bandwidth list before the virtual device is freed, particularly during xhci host controller removal or dying scenarios. The problem affects systems utilizing software bandwidth checking, currently limited to the xHC in Intel Panther Point PCH (Ivy Bridge) chipsets.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾