CVE-2024-35822: usb: udc: remove warning when queue disabled ep
In the Linux kernel, the following vulnerability has been resolved:
usb: udc: remove warning when queue disabled ep
It is possible trigger below warning message from mass storage function,
WARNING: CPU: 6 PID: 3839 at drivers/usb/gadget/udc/core.c:294 usbepqueue+0x7c/0x104 pc : usbepqueue+0x7c/0x104 lr : fsgmainthread+0x494/0x1b3c
Root cause is mass storage function try to queue request from main thread, but other thread may already disable ep when function disable.
As there is no function failure in the driver, in order to avoid effort to fix warning, change WARNONONCE() in usbepqueue() to prdebug().
Other sources
In the Linux kernel, the following vulnerability has been resolved:
usb: udc: remove warning when queue disabled ep
The Linux kernel CVE team has assigned CVE-2024-35822 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051744-CVE-2024-35822-410b@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35822?
The severity of CVE-2024-35822 is categorized as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-35822?
To fix CVE-2024-35822, upgrade to a patched version of the Linux kernel, such as 4.19.312, 5.4.274, 5.10.215, or higher versions specified in the remediation.
Which Linux kernel versions are affected by CVE-2024-35822?
CVE-2024-35822 affects multiple versions of the Linux kernel prior to the specified remedial versions, including versions from Red Hat and Debian distributions.
What does CVE-2024-35822 vulnerability involve?
CVE-2024-35822 involves a warning message that can be triggered from the mass storage function in the Linux kernel's USB device controller.
Is CVE-2024-35822 related to performance issues?
Yes, CVE-2024-35822 can be related to performance issues due to the warning generated when the queue for a disabled endpoint is accessed.