CVE-2024-43883

In the Linux kernel, the following vulnerability has been resolved:

usb: vhci-hcd: Do not drop references before new references are gained

At a few places the driver carries stale pointers to references that can still be used. Make sure that does not happen. This strictly speaking closes ZDI-CAN-22273, though there may be similar races in the driver.

This vulnerability is rated as Moderate severity because exploitation requires local access and interaction with the USB/IP virtual host controller interface, limiting the impact to local denial of service or kernel memory exposure. The vulnerable vhci-hcd driver is not active by default in standard Red Hat deployments and is only utilized when USB/IP client functionality is explicitly configured. Consequently, typical environments that do not use USB over IP remain unexposed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.