PT-2024-9252 · Linux+7 · Linux Kernel+7

Published

2024-06-20

·

Updated

2025-09-29

·

CVE-2022-48760

CVSS v3.1

7.1

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The issue is related to a bug in the Linux kernel's USB core, where processes hang waiting for usb kill urb() to return. This occurs due to memory-access ordering issues on SMP systems, specifically a pattern known as "Store Buffering" (SB), which can cause CPUs to execute reads ahead of writes. The problem arises when the wakeup notification that the URB has completed is not received, leading to a hang in usb kill urb(). The same pattern of accesses occurs in usb poison urb() and the failure pathway of usb hcd submit urb(). The issue is fixed by adding suitable memory barriers to provide proper memory-access ordering.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Overflow

Improper Locking

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2024:7000
ALSA-2024:7001
ALSA-2025_16880
BDU:2024-10940
CESA-2024_7000
CESA-2024_7001
CVE-2022-48760
INFSA-2024_7000
INFSA-2024_7001
OESA-2024-1862
OPENSUSE-SU-2024_2362-1
OPENSUSE-SU-2024_2372-1
OPENSUSE-SU-2024_2394-1
RHSA-2024:7000
RHSA-2024:7001
RHSA-2024_7000
RHSA-2024_7001
RLSA-2024:7001
SUSE-SU-2024:2360-1
SUSE-SU-2024:2362-1
SUSE-SU-2024:2365-1
SUSE-SU-2024:2372-1
SUSE-SU-2024:2381-1
SUSE-SU-2024:2384-1
SUSE-SU-2024:2394-1
SUSE-SU-2024:2561-1
SUSE-SU-2024:2902-1
SUSE-SU-2024:2929-1
SUSE-SU-2024:2939-1

Affected Products

Almalinux
Astra Linux
Centos
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse