Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the USB XHCI Tegra driver of the Linux kernel allows a sleeping function to be called from an invalid context, which can lead to potential issues in handling USB events. This problem occurs when the dual-role port is set to host mode, causing a bug where a function that can sleep is invoked in an atomic context, violating the kernel's scheduling rules. The vulnerability affects several versions of the Linux kernel.
The vulnerability can cause a kernel panic by invoking a sleeping function in an atomic context, which is not permitted. This can disrupt the normal operation of the kernel and potentially lead to a denial of service.
To reproduce this vulnerability, set the dual-role USB port to host mode. This will trigger the 'sleeping function called from invalid context' error, as the XHCI Tegra driver attempts to access USB port information in a way that violates kernel scheduling rules.
The vulnerability has been addressed in the official Linux Git repository. Users can upgrade to the latest version of the Linux kernel to apply the fix.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.