PT-2024-9252 · Linux+7 · Linux Kernel+7
Published
2024-06-20
·
Updated
2025-09-29
·
CVE-2022-48760
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to a bug in the Linux kernel's USB core, where processes hang waiting for
usb kill urb() to return. This occurs due to memory-access ordering issues on SMP systems, specifically a pattern known as "Store Buffering" (SB), which can cause CPUs to execute reads ahead of writes. The problem arises when the wakeup notification that the URB has completed is not received, leading to a hang in usb kill urb(). The same pattern of accesses occurs in usb poison urb() and the failure pathway of usb hcd submit urb(). The issue is fixed by adding suitable memory barriers to provide proper memory-access ordering.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Buffer Overflow
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse