Linux vulnerability

What happened

In the Linux kernel, the following vulnerability has been resolved: usb: core: Add lock to usb_wakeup_notification() Add a spin lock to usb_wakeup notification to prevent a race condition with dereferencing freed memory. This could be hit by the xHCI driver as it calls this function from an IRQ and could race with the hub_disconnect() function, which properly grabs this lock to protect the state of the device.

Affected versions

Linux: 4ee823b83bc9851743fab756c76b27d6a1e2472b through before a7a16167991c88016acef720927400404039d850 (git); 4ee823b83bc9851743fab756c76b27d6a1e2472b through before 975ef630393c07fcbebf94f4d97043161b77a6ce (git); 4ee823b83bc9851743fab756c76b27d6a1e2472b through before 71cfda2fdf78041a01e9d94143baa79feabbdbf6 (git); 4ee823b83bc9851743fab756c76b27d6a1e2472b through before 04ab260407972e631c86f2bc576cd8e64d65b325 (git); 4ee823b83bc9851743fab756c76b27d6a1e2472b through before bf2288583b4e072bdff17a233963619e4bc7a8b5 (git); 4ee823b83bc9851743fab756c76b27d6a1e2472b through before d80b946804674069db7ce6657319a71cf8eeaa5a (git); 4ee823b83bc9851743fab756c76b27d6a1e2472b through before 960ca456faf61824b178f47967340300b24183db (git); 4ee823b83bc9851743fab756c76b27d6a1e2472b through before 7c48aa0c1e79116b8af4b988d16ee29b427d6491 (git); 4ee823b83bc9851743fab756c76b27d6a1e2472b through before e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6 (git); 3.4 Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.