CVE-2024-26964

usb: xhci: Add error handling in xhci_map_urb_for_dma

State: Published
Severity: Not scored
Published: May 1, 2024
Updated: May 11, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: xhci: Add error handling in xhci_map_urb_for_dma

Currently xhci_map_urb_for_dma() creates a temporary buffer and copies the SG list to the new linear buffer. But if the kzalloc_node() fails, then the following sg_pcopy_to_buffer() can lead to crash since it tries to memcpy to NULL pointer.

So return -ENOMEM if kzalloc returns null pointer.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2017a1e58472a27e532b9644b4a61dfe18f6baac to before 4a49d24fdec0a802aa686a567a3989a9fdf4e5ddAffected 2017a1e58472a27e532b9644b4a61dfe18f6baac to before b2c898469dfc388f619c6c972a28466cbb1442eaAffected 2017a1e58472a27e532b9644b4a61dfe18f6baac to before 620b6cf2f1a270f48d38e6b8ce199c1acb3e90f4Affected 2017a1e58472a27e532b9644b4a61dfe18f6baac to before 962300a360d24c5be5a188cda48da58a37e4304dAffected 2017a1e58472a27e532b9644b4a61dfe18f6baac to before 7b6cc33593d7ccfc3011b290849cfa899db46757Affected 2017a1e58472a27e532b9644b4a61dfe18f6baac to before be95cc6d71dfd0cba66e3621c65413321b398052Affected
LinuxLinux	5.11Affected before 5.11Not affected 5.15.154 through 5.15.Not affected 6.1.84 through 6.1.Not affected 6.6.24 through 6.6.Not affected 6.7.12 through 6.7.Not affected 6.8.3 through 6.8.*Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

2017a1e58472a27e532b9644b4a61dfe18f6baac to before 4a49d24fdec0a802aa686a567a3989a9fdf4e5ddAffected
2017a1e58472a27e532b9644b4a61dfe18f6baac to before b2c898469dfc388f619c6c972a28466cbb1442eaAffected
2017a1e58472a27e532b9644b4a61dfe18f6baac to before 620b6cf2f1a270f48d38e6b8ce199c1acb3e90f4Affected
2017a1e58472a27e532b9644b4a61dfe18f6baac to before 962300a360d24c5be5a188cda48da58a37e4304dAffected
2017a1e58472a27e532b9644b4a61dfe18f6baac to before 7b6cc33593d7ccfc3011b290849cfa899db46757Affected
2017a1e58472a27e532b9644b4a61dfe18f6baac to before be95cc6d71dfd0cba66e3621c65413321b398052Affected

LinuxLinux

5.11Affected
before 5.11Not affected
5.15.154 through 5.15.*Not affected
6.1.84 through 6.1.*Not affected
6.6.24 through 6.6.*Not affected
6.7.12 through 6.7.*Not affected
6.8.3 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.