hardware behavior during attach vendor usb device in Ubuntu 20.04

Bug #1930542 reported by Emily Miller
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ubuntu
New
Undecided
Unassigned

Bug Description

Summary:
Upon attaching a VLI hub device, Ubuntu 20.04 will send a SPI vendor command to the VLI hub. This is unwanted behavior that will alter our firmware in unexpected and dangerous ways --outside of normal firmware update protocol. Previous versions of Ubuntu were only allowed permission to send standard commands, not vendor specific commands.

Further Information:
1. USB device used: U3 VLI Hub, ID:2109/0817
2. Ubuntu hardware: Across all standard motherboards running Ubuntu 20.04 OS.
3. What you expected to happen: No USB vendor command, 0xC0, issued.
4. What actually happened: Several USB vendor command issued.
5. If possible, steps to reproduce error: step 1 power-on Ubuntu 20.04 OS PC; step 2 plug-in VL817 hub.

Tags: bot-comment
Revision history for this message
Emily Miller (vialabs) wrote :
Revision history for this message
Ubuntu Foundations Team Bug Bot (crichton) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. It seems that your bug report is not filed about a specific source package though, rather it is just filed against Ubuntu in general. It is important that bug reports be filed about source packages so that people interested in the package can find the bugs about it. You can find some hints about determining what package your bug might be about at https://wiki.ubuntu.com/Bugs/FindRightPackage. You might also ask for help in the #ubuntu-bugs irc channel on Freenode.

To change the source package that this bug is filed about visit https://bugs.launchpad.net/ubuntu/+bug/1930542/+editstatus and add the package name in the text box next to the word Package.

[This is an automated message. I apologize if it reached you inappropriately; please just reply to this message indicating so.]

tags: added: bot-comment
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.