https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 22:40:07 +0000 https://vulnerability.circl.lu/vuln/cve-2022-50470 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>xhci: Remove device endpoints from bandwidth list when freeing the device</p> <p>Endpoints are normally deleted from the bandwidth list when they are dropped, before the virt device is freed.</p> <p>If xHC host is dying or being removed then the endpoints aren&#39;t dropped cleanly due to functions returning early to avoid interacting with a non-accessible host controller.</p> <p>So check and delete endpoints that are still on the bandwidth list when freeing the virt device.</p> <p>Solves a list_del corruption kernel crash when unbinding xhci-pci, caused by xhci_mem_cleanup() when it later tried to delete already freed endpoints from the bandwidth list.</p> <p>This only affects hosts that use software bandwidth checking, which currenty is only the xHC in intel Panther Point PCH (Ivy Bridge)</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>xhci: Remove device endpoints from bandwidth list when freeing the device</p> <p>Endpoints are normally deleted from the bandwidth list when they are dropped, before the virt device is freed.</p> <p>If xHC host is dying or being removed then the endpoints aren&#39;t dropped cleanly due to functions returning early to avoid interacting with a non-accessible host controller.</p> <p>So check and delete endpoints that are still on the bandwidth list when freeing the virt device.</p> <p>Solves a list_del corruption kernel crash when unbinding xhci-pci, caused by xhci_mem_cleanup() when it later tried to delete already freed endpoints from the bandwidth list.</p> <p>This only affects hosts that use software bandwidth checking, which currenty is only the xHC in intel Panther Point PCH (Ivy Bridge)</p> https://vulnerability.circl.lu/vuln/cve-2022-50470