CVE-2024-36977

A flaw was found in the Linux kernel's USB DWC3 driver. A local attacker can cause a Denial of Service (DoS) by triggering a race condition during USB endpoint disconnection. When an active data transfer is cancelled, memory buffers may be unmapped while the hardware controller is still accessing them, causing memory management faults and resulting in a system crash.

This vulnerability is rated as Low severity because it requires local access and is restricted to systems utilizing specific Synopsys DesignWare USB3 controller hardware operating in device or gadget mode, limiting the blast radius to a denial of service. Standard Red Hat Enterprise Linux enterprise deployments rarely utilize USB gadget functionality or the affected controller revisions, requiring specialized hardware configurations and elevated privileges to interact with the relevant endpoint interfaces. Consequently, the risk of an unprivileged local attacker triggering an SMMU fault or system crash under default production environments remains minimal.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.