Merge: CVE-2024-42226 kernel: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB

MR: https://gitlab.com/redhat/rhel/src/kernel/rhel-9/-/merge_requests/2322

JIRA: https://issues.redhat.com/browse/RHEL-52378
CVE: CVE-2024-42226

This MR fixes a lack of endpoint ring condition at the handle_tx_event()
function. This bug can be triggered on transfer events that don't always
point to a TRB.

Signed-off-by: Desnes Nunes <desnesn@redhat.com>

Approved-by: Andrew Halaney <ahalaney@redhat.com>
Approved-by: Charles Mirabile <cmirabil@redhat.com>
Approved-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>
Approved-by: David Arcari <darcari@redhat.com>

Merged-by: Lucas Zampieri <lzampier@redhat.com>

Author: zampierilucas

drivers/usb/host/xhci-ring.c

@@ -2660,16 +2660,17 @@ static int handle_tx_event(struct xhci_hcd *xhci,
 			else
 				xhci_handle_halted_endpoint(xhci, ep, NULL,
 							    EP_SOFT_RESET);
-			goto cleanup;
+			break;
 		case COMP_RING_UNDERRUN:
 		case COMP_RING_OVERRUN:
 		case COMP_STOPPED_LENGTH_INVALID:
-			goto cleanup;
+			break;
 		default:
 			xhci_err(xhci, "ERROR Transfer event for unknown stream ring slot %u ep %u\n",
 				 slot_id, ep_index);
 			goto err_out;
 		}
+		return 0;
 	}
 
 	/* Count current td numbers if ep->skip is set */