oss-security - CVE Request: bad USB host adapter implementation can corrupt memory/brick machine

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Thu, 2 Jun 2016 11:10:13 +0200
From: Marcus Meissner <meissner@...e.de>
To: OSS Security List <oss-security@...ts.openwall.com>
Subject: CVE Request: bad USB host adapter implementation can corrupt
 memory/brick machine

Hi,

reported here:

https://marc.info/?l=linux-usb&m=146480770532266&w=2

issue is that the Frescologic device id 1009 host controller apparently
has a broken XHCI STREAMS implementation which would lead to memory corruptions

Redhat might have already assigned a CVE.

I am not sure if this is controllable for code execution, but at least USB devices can be used
to brick a machine with the kernel running (local denial of service)?

Ciao, Marcus

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.