PT-2024-36996 · Linux+6 · Linux Kernel+6
Hubert Wiśniewski
·
Published
2024-11-10
·
Updated
2025-10-03
·
CVE-2024-56687
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A hardware lockup issue has been identified in the Linux kernel, specifically in the MUSB (Media Universal Serial Bus) driver. This issue can occur when a request's callback is invoked from within the
usb ep queue() function, which can create deadlock situations. The problem arises when the gadget is initialized and a packet arrives, setting the RXPKTRDY flag and raising an interrupt. If IRQs (Interrupt Requests) are enabled during the complete callback, the endpoint can become locked up, preventing further packets from being received. This issue is particularly relevant to the USB Ethernet gadget, where the rx complete() callback calls netif rx(), which can disable and then re-enable IRQs. The situation is complex, involving multiple components and potential workarounds.Recommendations
To resolve this issue, consider the following approaches:
- Ensure that callbacks never enable IRQs, although this might be challenging to enforce due to the complexity of interactions between
netif rx()and interrupts. - Disable MUSB interrupts in
musb g giveback()before calling the callback and re-enable them afterward to prevent MUSB interrupts from being handled during the callback. - Modify the interrupt handler to clear the RXPKTRDY flag if the request queue is empty, although this approach may waste CPU time.
- Flush the Rx FIFO instead of calling
rxstate()inmusb ep restart()to ensure the hardware can receive packets when there is at least one request in the queue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu