Isochronous Transfer Issue in Linux Kernel Affecting USB Functionality

CVE-2025-22023

Summary

A vulnerability exists in the Linux kernel's USB xHCI driver, which previously malfunctioned during the handling of isochronous transfers when reaching specific Stopped events. This oversight led to the erroneous skipping of isochronous transfer descriptors (TDs) when the system should have handled them differently. Instead of ensuring proper handling when faced with Stopped - Length Invalid events, the driver mistakenly cleared the skip flag, resulting in potential data loss and unreleased resources. A fix was introduced in version 6.11 to ensure that TDs are correctly recognized even when faced with complex stop scenarios, diminishing the chances of unnoticed resource processes and unintentional memory management issues.

References