From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 4CB9D27181F for ; Wed, 12 Feb 2025 13:53:08 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1739368389; cv=none; b=ubh5midO9KNRpxzzZYkRizl9VxvGMLtYCWke6+NWB5cZyBr8WVAxhsAIX+clDgHSf48VQ7TYgojBScZ17S2qrCDE1FcZQXugxGCcCkrGRENXTATUFcFS7mQzuy6Ms4WoPggmvxEPhHuQcsPJfaRSepa/P7f1WhbunQuYr5YAQiw= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1739368389; c=relaxed/simple; bh=kLI7kvXZ7ZSQTUt+OP+45fdY6CtVxYFXPIy8uewCEL8=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=JuMWtKChmsMXudvyP5haydjTVyKh0Jx5mhAEE7GLCyo+RmbO/+xEI4LSsc8eqFqVYY9qqrQCjnOANDPNWjWh+mS/b2cwExoKQffVv5DYaSitWuh3LN70syTwpmypyD24DhnnOnJFVVNq3BjrksEM1sQrQn6tn2nfua4A52JYL4Y= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=IKSArUcH; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="IKSArUcH" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 4DCAEC4CEE8; Wed, 12 Feb 2025 13:53:08 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1739368388; bh=kLI7kvXZ7ZSQTUt+OP+45fdY6CtVxYFXPIy8uewCEL8=; h=From:To:Cc:Subject:Date:Reply-to:From; b=IKSArUcHNZgIlp1JrXjDnF216djqNIHALOsyBHF4qqvbHWboo7lPUFVihQRxAy0U8 eMObiXQ6grYyUxUIBUGgGjimudZGQI3gYxpi8eSdV8FrnGAoxKjTXXMAOf5e2xeFiu JVqy/WFohaI3gFV1FysS+IoXZ/DXzMSOhLw5rvvo= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2025-21698: Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" Date: Wed, 12 Feb 2025 14:52:01 +0100 Message-ID: <2025021201-CVE-2025-21698-ec61@gregkh> X-Mailer: git-send-email 2.48.1 Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Reply-to: , X-Developer-Signature: v=1; a=openpgp-sha256; l=2694; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=kLI7kvXZ7ZSQTUt+OP+45fdY6CtVxYFXPIy8uewCEL8=; b=owGbwMvMwCRo6H6F97bub03G02pJDOlrlje2qV/Qy47IFfiXfG3bZd7N9R0PdIpVtV17065Nv mR8yWVPRywLgyATg6yYIsuXbTxH91ccUvQytD0NM4eVCWQIAxenAEzk9EeG+VEKSTx++jvbyzl1 F02VfKmx+GvxYYb5ARtPzDzOfiNA+ciMvOIfTwuUOdg/AwA= X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit Description =========== In the Linux kernel, the following vulnerability has been resolved: Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" This reverts commit 13014969cbf07f18d62ceea40bd8ca8ec9d36cec. It is reported to cause crashes on Tegra systems, so revert it for now. The Linux kernel CVE team has assigned CVE-2025-21698 to this issue. Affected and fixed versions =========================== Fixed in 5.4.290 with commit 76e7577bb89b327abdf72d4c0d486074a17f712a Fixed in 5.10.234 with commit 99c866bea85efdebfb6953a8a305f21ef5ca4991 Fixed in 5.15.178 with commit 20ce02f2f73af331dec76d3b8b78b18f4699db05 Fixed in 6.1.128 with commit 33233b06ad15730d0463e8f152db2eca15c7f498 Fixed in 6.6.75 with commit 3d8f4dc8c78ffd77a4106614977c1e51531690f7 Fixed in 6.12.12 with commit bb50dc2aa49dcb5cc81205d814c08337b5da28ac Fixed in 6.13.1 with commit f8b8883ad76d36ee890b18311096af7af7d7a921 Fixed in 6.14-rc1 with commit 086fd062bc3883ae1ce4166cff5355db315ad879 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2025-21698 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/usb/gadget/function/u_serial.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/76e7577bb89b327abdf72d4c0d486074a17f712a https://git.kernel.org/stable/c/99c866bea85efdebfb6953a8a305f21ef5ca4991 https://git.kernel.org/stable/c/20ce02f2f73af331dec76d3b8b78b18f4699db05 https://git.kernel.org/stable/c/33233b06ad15730d0463e8f152db2eca15c7f498 https://git.kernel.org/stable/c/3d8f4dc8c78ffd77a4106614977c1e51531690f7 https://git.kernel.org/stable/c/bb50dc2aa49dcb5cc81205d814c08337b5da28ac https://git.kernel.org/stable/c/f8b8883ad76d36ee890b18311096af7af7d7a921 https://git.kernel.org/stable/c/086fd062bc3883ae1ce4166cff5355db315ad879