Linux Kernel USB Dummy HCD Synchronization Error Vulnerability

A synchronization error vulnerability has been identified in the Linux kernel's USB dummy host controller driver. This issue arises from a race condition between USB reset handling and driver unbinding, which can lead to a crash by causing an addressing exception. The vulnerability is present in the USB gadget subsystem, specifically within the dummy_hcd driver.

Impact

Exploitation of this vulnerability causes a crash by provoking an addressing exception, disrupting normal operation of the USB gadget subsystem.

Reproduction

The vulnerability can be reproduced by emulating a USB reset while simultaneously unbinding the driver, creating a race condition that leads to a crash.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.