In the Linux kernel, the following vulnerability has been resolved:
HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
Syzbot reported an slab-out-of-bounds Read in thrustmaster_probe() bug. The root case is in missing validation check of actual number of endpoints.
Code should not blindly access usb_host_interface::endpoint array, since it may contain less endpoints than code expects.
Fix it by adding missing validaion check and print an error if number of endpoints do not match expected number
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade bpftoolUpgrade kernel-rt-debug-core | Sep 26, 2024 | Jul 16, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 16, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | Jul 16, 2024 |
| Rocky_linux | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade perf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade bpftool | Oct 2, 2024 | Jul 16, 2024 |
| Ubuntu | — | Upgrade linux-realtimeUpgrade linux-intel-iotg-5.15 | Nov 19, 2024 | Jul 16, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub