Bug 1227234 (ZDI-CAN-22273) - VUL-0: kernel: USB/IP VHCI Driver Race Condition Privilege Escalation Vulnerability
Summary: VUL-0: kernel: USB/IP VHCI Driver Race Condition Privilege Escalation Vulnera...
Status: NEW
Alias: ZDI-CAN-22273
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Oliver Neukum
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/411859/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-07-01 12:38 UTC by SMASH SMASH
Modified: 2024-07-16 15:15 UTC (History)
4 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description SMASH SMASH 2024-07-01 12:38:35 UTC 
This vulnerability allows physically present attackers to escalate privileges on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the processing of the reset event. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.

References:
https://lore.kernel.org/lkml/DM5PR0102MB3477B499A8A3292D6BFFBE80804C2@DM5PR0102MB3477.prod.exchangelabs.com/T/
https://www.zerodayinitiative.com/advisories/ZDI-24-843/