|
Vulnerabilities
< Back

CVE-2025-21916

Updated on 01 Apr 2025

Severity

5.5 Medium severity

Details

CVSS score
5.5
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

usb: atm: cxacru: fix a flaw in existing endpoint checks

Syzbot once again identified a flaw in usb endpoint checking, see [1]. This time the issue stems from a commit authored by me (2eabb655a968 (“usb: atm: cxacru: fix endpoint checking in cxacru_bind()”)).

While using usb_find_common_endpoints() may usually be enough to discard devices with wrong endpoints, in this case one needs more than just finding and identifying the sufficient number of endpoints of correct types - one needs to check the endpoint’s address as well.

Since cxacru_bind() fills URBs with CXACRU_EP_CMD address in mind, switch the endpoint verification approach to usb_check_XXX_endpoints() instead to fix incomplete ep testing.

[1] Syzbot report: usb 5-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 0 PID: 1378 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc4e/0x18c0 drivers/usb/core/urb.c:503 … RIP: 0010:usb_submit_urb+0xc4e/0x18c0 drivers/usb/core/urb.c:503 … Call Trace: cxacru_cm+0x3c8/0xe50 drivers/usb/atm/cxacru.c:649 cxacru_card_status drivers/usb/atm/cxacru.c:760 [inline] cxacru_bind+0xcf9/0x1150 drivers/usb/atm/cxacru.c:1223 usbatm_usb_probe+0x314/0x1d30 drivers/usb/atm/usbatm.c:1058 cxacru_usb_probe+0x184/0x220 drivers/usb/atm/cxacru.c:1377 usb_probe_interface+0x641/0xbb0 drivers/usb/core/driver.c:396 really_probe+0x2b9/0xad0 drivers/base/dd.c:658 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:800 driver_probe_device+0x50/0x430 drivers/base/dd.c:830 …

Details

Affected product:
Oracle Linux 7 ELS , Ubuntu 18.04 ELS
Affected packages:
kernel-uek @ 5.4.17 (+1 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Debian 11 Released
4 kernels
  • 5.10.221-1
  • 5.10.223-1
  • 5.10.226-1
  • 5.10.234-1
Debian 11 cloud Released
4 kernels
  • 5.10.221-1
  • 5.10.223-1
  • 5.10.226-1
  • 5.10.234-1
Debian 12 Will Not Fix —
Ubuntu 18.04 AWS Focal Will Not Fix —
Ubuntu 18.04 HWE Focal Released
69 kernels
  • 5.4.0-53.59~18.04.1
  • 5.4.0-56.62~18.04.1
  • 5.4.0-45.49~18.04.2
  • 5.4.0-51.56~18.04.1
  • 5.4.0-48.52~18.04.1
  • 5.4.0-47.51~18.04.1
  • 5.4.0-52.57~18.04.1
  • 5.4.0-59.65~18.04.1
  • 5.4.0-62.70~18.04.1
  • 5.4.0-44.48~18.04.1
  • 5.4.0-46.50~18.04.1
  • 5.4.0-49.53~18.04.1
  • 5.4.0-54.60~18.04.1
  • 5.4.0-55.61~18.04.1
  • 5.4.0-57.63~18.04.1
  • 5.4.0-58.64~18.04.1
  • 5.4.0-60.67~18.04.1
  • 5.4.0-63.71~18.04.1
  • 5.4.0-64.72~18.04.1
  • 5.4.0-65.73~18.04.1
  • 5.4.0-66.74~18.04.2
  • 5.4.0-67.75~18.04.1
  • 5.4.0-70.78~18.04.1
  • 5.4.0-71.79~18.04.1
  • 5.4.0-72.80~18.04.1
  • 5.4.0-73.82~18.04.1
  • 5.4.0-74.83~18.04.1
  • 5.4.0-77.86~18.04.1
  • 5.4.0-80.90~18.04.1
  • 5.4.0-81.91~18.04.1
  • 5.4.0-84.94~18.04.1
  • 5.4.0-86.97~18.04.1
  • 5.4.0-87.98~18.04.1
  • 5.4.0-89.100~18.04.1
  • 5.4.0-90.101~18.04.1
  • 5.4.0-91.102~18.04.1
  • 5.4.0-92.103~18.04.2
  • 5.4.0-94.106~18.04.1
  • 5.4.0-96.109~18.04.1
  • 5.4.0-97.110~18.04.1
  • 5.4.0-99.112~18.04.1
  • 5.4.0-100.113~18.04.1
  • 5.4.0-104.118~18.04.1
  • 5.4.0-105.119~18.04.1
  • 5.4.0-107.121~18.04.1
  • 5.4.0-109.123~18.04.1
  • 5.4.0-110.124~18.04.1
  • 5.4.0-113.127~18.04.1
  • 5.4.0-117.132~18.04.1
  • 5.4.0-121.137~18.04.1
  • 5.4.0-120.136~18.04.1
  • 5.4.0-122.138~18.04.1
  • 5.4.0-124.140~18.04.1
  • 5.4.0-125.141~18.04.1
  • 5.4.0-126.142~18.04.1
  • 5.4.0-128.144~18.04.1
  • 5.4.0-131.147~18.04.1
  • 5.4.0-132.148~18.04.1
  • 5.4.0-133.149~18.04.1
  • 5.4.0-135.152~18.04.2
  • 5.4.0-136.153~18.04.1
  • 5.4.0-137.154~18.04.1
  • 5.4.0-139.156~18.04.1
  • 5.4.0-144.161~18.04.1
  • 5.4.0-146.163~18.04.1
  • 5.4.0-147.164~18.04.1
  • 5.4.0-148.165~18.04.1
  • 5.4.0-149.166~18.04.1
  • 5.4.0-150.167~18.04.1
Ubuntu 20.04 Released
126 kernels
  • 5.4.0-31.35
  • 5.4.0-28.32
  • 5.4.0-34.38
  • 5.4.0-26.30
  • 5.4.0-29.33
  • 5.4.0-30.34
  • 5.4.0-37.41
  • 5.4.0-40.44
  • 5.4.0-32.36
  • 5.4.0-33.37
  • 5.4.0-38.42
  • 5.4.0-39.43
  • 5.4.0-42.46
  • 5.4.0-45.49
  • 5.4.0-47.51
  • 5.4.0-48.52
  • 5.4.0-43.47
  • 5.4.0-44.48
  • 5.4.0-51.56
  • 5.4.0-49.53
  • 5.4.0-52.57
  • 5.4.0-53.59
  • 5.4.0-54.60
  • 5.4.0-56.62
  • 5.4.0-58.64
  • 5.4.0-46.50
  • 5.4.0-55.61
  • 5.4.0-57.63
  • 5.4.0-59.65
  • 5.4.0-60.67
  • 5.4.0-62.70
  • 5.4.0-64.72
  • 5.4.0-61.69
  • 5.4.0-63.71
  • 5.4.0-65.73
  • 5.4.0-66.74
  • 5.4.0-67.75
  • 5.4.0-70.78
  • 5.4.0-71.79
  • 5.4.0-72.80
  • 5.4.0-73.82
  • 5.4.0-74.83
  • 5.4.0-77.86
  • 5.4.0-80.90
  • 5.4.0-81.91
  • 5.4.0-84.94
  • 5.4.0-86.97
  • 5.4.0-88.99
  • 5.4.0-89.100
  • 5.4.0-90.101
  • 5.4.0-91.102
  • 5.4.0-92.103
  • 5.4.0-94.106
  • 5.4.0-96.109
  • 5.4.0-97.110
  • 5.4.0-99.112
  • 5.4.0-100.113
  • 5.4.0-104.118
  • 5.4.0-105.119
  • 5.4.0-107.121
  • 5.4.0-109.123
  • 5.4.0-110.124
  • 5.4.0-113.127
  • 5.4.0-117.132
  • 5.4.0-121.137
  • 5.4.0-120.136
  • 5.4.0-112.126
  • 5.4.0-122.138
  • 5.4.0-124.140
  • 5.4.0-125.141
  • 5.4.0-126.142
  • 5.4.0-128.144
  • 5.4.0-131.147
  • 5.4.0-132.148
  • 5.4.0-133.149
  • 5.4.0-135.152
  • 5.4.0-136.153
  • 5.4.0-137.154
  • 5.4.0-139.156
  • 5.4.0-144.161
  • 5.4.0-123.139
  • 5.4.0-146.163
  • 5.4.0-147.164
  • 5.4.0-148.165
  • 5.4.0-149.166
  • 5.4.0-150.167
  • 5.4.0-145.162
  • 5.4.0-152.169
  • 5.4.0-153.170
  • 5.4.0-155.172
  • 5.4.0-156.173
  • 5.4.0-159.176
  • 5.4.0-162.179
  • 5.4.0-163.180
  • 5.4.0-164.181
  • 5.4.0-165.182
  • 5.4.0-166.183
  • 5.4.0-167.184
  • 5.4.0-169.187
  • 5.4.0-170.188
  • 5.4.0-171.189
  • 5.4.0-172.190
  • 5.4.0-173.191
  • 5.4.0-174.193
  • 5.4.0-176.196
  • 5.4.0-177.197
  • 5.4.0-181.201
  • 5.4.0-182.202
  • 5.4.0-186.206
  • 5.4.0-187.207
  • 5.4.0-189.209
  • 5.4.0-190.210
  • 5.4.0-192.212
  • 5.4.0-193.213
  • 5.4.0-195.215
  • 5.4.0-196.216
  • 5.4.0-198.218
  • 5.4.0-200.220
  • 5.4.0-202.222
  • 5.4.0-204.224
  • 5.4.0-205.225
  • 5.4.0-208.228
  • 5.4.0-211.231
  • 5.4.0-212.232
  • 5.4.0-214.234
  • 5.4.0-215.235
Ubuntu 20.04 Azure Released
99 kernels
  • 5.4.0-1041.43
  • 5.4.0-1040.42
  • 5.4.0-1023.23
  • 5.4.0-1034.35
  • 5.4.0-1035.36
  • 5.4.0-1031.32
  • 5.4.0-1032.33
  • 5.4.0-1039.41
  • 5.4.0-1020.20
  • 5.4.0-1026.26
  • 5.4.0-1025.25
  • 5.4.0-1043.45
  • 5.4.0-1022.22
  • 5.4.0-1036.38
  • 5.4.0-1024.24
  • 5.4.0-1027.27
  • 5.4.0-1029.29
  • 5.4.0-1033.34
  • 5.4.0-1037.39
  • 5.4.0-1038.40
  • 5.4.0-1044.46
  • 5.4.0-1046.48
  • 5.4.0-1047.49
  • 5.4.0-1048.50
  • 5.4.0-1049.51
  • 5.4.0-1051.53
  • 5.4.0-1055.57
  • 5.4.0-1056.58
  • 5.4.0-1058.60
  • 5.4.0-1059.62
  • 5.4.0-1062.65
  • 5.4.0-1063.66
  • 5.4.0-1061.64
  • 5.4.0-1064.67
  • 5.4.0-1065.68
  • 5.4.0-1067.70
  • 5.4.0-1068.71
  • 5.4.0-1069.72
  • 5.4.0-1070.73
  • 5.4.0-1072.75
  • 5.4.0-1073.76
  • 5.4.0-1074.77
  • 5.4.0-1077.80
  • 5.4.0-1078.81
  • 5.4.0-1080.83
  • 5.4.0-1083.87
  • 5.4.0-1085.90
  • 5.4.0-1086.91
  • 5.4.0-1089.94
  • 5.4.0-1090.95
  • 5.4.0-1091.96
  • 5.4.0-1094.100
  • 5.4.0-1098.104
  • 5.4.0-1100.106
  • 5.4.0-1101.107
  • 5.4.0-1103.109
  • 5.4.0-1104.110
  • 5.4.0-1105.111
  • 5.4.0-1106.112
  • 5.4.0-1107.113
  • 5.4.0-1108.114
  • 5.4.0-1109.115
  • 5.4.0-1110.116
  • 5.4.0-1111.117
  • 5.4.0-1112.118
  • 5.4.0-1113.119
  • 5.4.0-1114.120
  • 5.4.0-1115.122
  • 5.4.0-1116.123
  • 5.4.0-1117.124
  • 5.4.0-1118.125
  • 5.4.0-1119.126
  • 5.4.0-1120.127
  • 5.4.0-1121.128
  • 5.4.0-1122.129
  • 5.4.0-1123.130
  • 5.4.0-1124.131
  • 5.4.0-1126.133
  • 5.4.0-1127.134
  • 5.4.0-1128.135
  • 5.4.0-1129.136
  • 5.4.0-1130.137
  • 5.4.0-1131.138
  • 5.4.0-1132.139
  • 5.4.0-1133.140
  • 5.4.0-1134.141
  • 5.4.0-1135.142
  • 5.4.0-1136.143
  • 5.4.0-1137.144
  • 5.4.0-1138.145
  • 5.4.0-1139.146
  • 5.4.0-1140.147
  • 5.4.0-1142.149
  • 5.4.0-1143.150
  • 5.4.0-1145.152
  • 5.4.0-1147.154
  • 5.4.0-1148.155
  • 5.4.0-1149.156
  • 5.4.0-1150.157
Ubuntu 20.04 GCP Ready For Release —
Ubuntu 20.04 HWE AWS Released
11 kernels
  • 5.15.0-1069.75~20.04.1
  • 5.15.0-1070.76~20.04.1
  • 5.15.0-1071.77~20.04.1
  • 5.15.0-1072.78~20.04.1
  • 5.15.0-1073.79~20.04.1
  • 5.15.0-1075.82~20.04.1
  • 5.15.0-1077.84~20.04.1
  • 5.15.0-1080.87~20.04.1
  • 5.15.0-1081.88~20.04.1
  • 5.15.0-1082.89~20.04.1
  • 5.15.0-1083.90~20.04.1
Ubuntu 20.04 HWE Azure Released
11 kernels
  • 5.15.0-1072.81~20.04.1
  • 5.15.0-1073.82~20.04.1
  • 5.15.0-1074.83~20.04.1
  • 5.15.0-1075.84~20.04.1
  • 5.15.0-1078.87~20.04.1
  • 5.15.0-1079.88~20.04.1
  • 5.15.0-1081.90~20.04.1
  • 5.15.0-1082.91~20.04.1
  • 5.15.0-1086.95~20.04.1
  • 5.15.0-1087.96~20.04.1
  • 5.15.0-1088.97~20.04.1
Ubuntu 22.04 Released
15 kernels
  • 5.15.0-121.131
  • 5.15.0-122.132
  • 5.15.0-124.134
  • 5.15.0-125.135
  • 5.15.0-127.137
  • 5.15.0-130.140
  • 5.15.0-126.136
  • 5.15.0-131.141
  • 5.15.0-128.138
  • 5.15.0-133.144
  • 5.15.0-134.145
  • 5.15.0-135.146
  • 5.15.0-136.147
  • 5.15.0-138.148
  • 5.15.0-139.149
Ubuntu 22.04 AWS Released
12 kernels
  • 5.15.0-1069.75
  • 5.15.0-1070.76
  • 5.15.0-1071.77
  • 5.15.0-1072.78
  • 5.15.0-1073.79
  • 5.15.0-1076.83
  • 5.15.0-1078.85
  • 5.15.0-1079.86
  • 5.15.0-1080.87
  • 5.15.0-1081.88
  • 5.15.0-1082.89
  • 5.15.0-1083.90
Ubuntu 22.04 Azure Released
12 kernels
  • 5.15.0-1072.81
  • 5.15.0-1073.82
  • 5.15.0-1074.83
  • 5.15.0-1075.84
  • 5.15.0-1078.87
  • 5.15.0-1079.88
  • 5.15.0-1081.90
  • 5.15.0-1082.91
  • 5.15.0-1084.93
  • 5.15.0-1086.95
  • 5.15.0-1087.96
  • 5.15.0-1088.97
Ubuntu 24.04 Released
20 kernels
  • 6.8.0-48.48
  • 6.8.0-49.49
  • 6.8.0-50.51
  • 6.8.0-51.52
  • 6.8.0-52.53
  • 6.8.0-54.56
  • 6.8.0-55.57
  • 6.8.0-53.55
  • 6.8.0-56.58
  • 6.8.0-57.59
  • 6.8.0-58.60
  • 6.8.0-59.61
  • 6.8.0-60.63
  • 6.8.0-62.65
  • 6.8.0-63.66
  • 6.8.0-64.67
  • 6.8.0-71.71
  • 6.8.0-78.78
  • 6.8.0-79.79
  • 6.8.0-83.83
Ubuntu 24.04 AWS Planned —