Marc Zyngier

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue arises when `xhci mem init()` fails and calls `xhci mem cleanup()` to handle the damage. If the failure occurs before `xhci->interrupters` is allocated but after `xhci->max interrupters` has been set, `xhci mem cleanup()` unconditionally dereferences `xhci->interrupters`, leading to problems. The fix involves gating the interrupt freeing loop with a check on `xhci->interrupters` being non-NULL. This issue was found while debugging a DMA allocation issue that led the XHCI driver to this exact path. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.