Remote No

Type Denial of service

Description

drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations.

AVG-2234 linux-hardened 5.12.19.hardened1-1 Medium Vulnerable

AVG-2235 linux-lts 5.10.53-1 5.10.54-1 Medium Fixed

AVG-2233 linux-zen 5.13.5.zen1-1 5.13.6.zen1-1 Medium Fixed

AVG-2232 linux 5.13.5.arch4-1 5.13.6.arch4-1 Medium Fixed

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.13.6&id=d4179cdb769a651f2ae89c325612a69bf6fbdf70
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.10.54&id=7af54a4e221e5619a87714567e2258445dc35435