摘要:
In the Linux kernel, the following vulnerability has been resolved:
usb: xhci: Add error handling in xhci_map_urb_for_dma
Currently xhci_map_urb_for_dma() creates a temporary buffer and copies
the SG list to the new linear buffer. But if the kzalloc_node() fails,
then the following sg_pcopy_to_buffer() can lead to crash since it
tries to memcpy to NULL pointer.
So return -ENOMEM if kzalloc returns null pointer.
安全等级: Low
公告ID: KylinSec-SA-2024-2123
发布日期: 2024年5月28日
关联CVE: CVE-2024-26964
In the Linux kernel, the following vulnerability has been resolved:
usb: xhci: Add error handling in xhci_map_urb_for_dma
Currently xhci_map_urb_for_dma() creates a temporary buffer and copies
the SG list to the new linear buffer. But if the kzalloc_node() fails,
then the following sg_pcopy_to_buffer() can lead to crash since it
tries to memcpy to NULL pointer.
So return -ENOMEM if kzalloc returns null pointer.
cve名称 | 产品 | 组件 | 是否受影响 |
---|---|---|---|
CVE-2024-26964 | KY3.4-4A | kernel | Unaffected |
CVE-2024-26964 | KY3.4-5 | kernel | Unaffected |
CVE-2024-26964 | KY3.5.1 | kernel | Unaffected |
CVE-2024-26964 | KY3.5.3 | kernel | Unaffected |
CVE-2024-26964 | V6 | kernel | Unaffected |