Threats tagged 'ghsa-gjp8-77gc-r4rr'

CVE-2024-45006 is a medium severity vulnerability in the Linux kernel's xHCI USB host controller driver affecting Panther Point xHC hardware. It involves a NULL pointer dereference triggered during full-speed USB device re-enumeration after a failed address device command. This occurs because bandwidth table pointers are not properly set up when re-enabling the device slot, leading to a kernel crash (NULL pointer dereference). The issue is fixed by correctly initializing bandwidth pointers and avoiding unnecessary bandwidth checks when only the default control endpoint is involved.