Description
In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() If 'ep' is NULL, result of ep_to_cdns3_ep(ep) is invalid pointer and its dereference with priv_ep->cdns3_dev may cause panic. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
7733f6c32e36ff9d7adadf40001039bf219b1cbe to < 7af83bb516d7aa4f96835288e4aeda21d7aa2a17affected7733f6c32e36ff9d7adadf40001039bf219b1cbe to < bfa0201468587072454dba7933e4a4a7be44467aaffected7733f6c32e36ff9d7adadf40001039bf219b1cbe to < d342203df9f2d0851b4acd9ed577d73d10eade77affected7733f6c32e36ff9d7adadf40001039bf219b1cbe to < eb82c0382285ee17a9966aaab27b8becb08eb1acaffected7733f6c32e36ff9d7adadf40001039bf219b1cbe to < c3ffc9c4ca44bfe9562166793d133e1fb0630ea6affected
Linux Linux
Default version status: affected
5.4affected0 to < 5.4unaffected5.10.137 to ≤ 5.10.*unaffected5.15.61 to ≤ 5.15.*unaffected5.18.18 to ≤ 5.18.*unaffected5.19.2 to ≤ 5.19.*unaffected6.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/7af83bb516d7aa4f96835288e4aeda21d7aa2a17 ↗
- https://git.kernel.org/stable/c/bfa0201468587072454dba7933e4a4a7be44467a ↗
- https://git.kernel.org/stable/c/d342203df9f2d0851b4acd9ed577d73d10eade77 ↗
- https://git.kernel.org/stable/c/eb82c0382285ee17a9966aaab27b8becb08eb1ac ↗
- https://git.kernel.org/stable/c/c3ffc9c4ca44bfe9562166793d133e1fb0630ea6 ↗