In the Linux kernel, the following vulnerability has been resolved:
HID: usbhid: fix info leak in hid_submit_ctrl
In hid_submit_ctrl(), the way of calculating the report length doesn't take into account that report->size can be zero. When running the syzkaller reproducer, a report of size 0 causes hid_submit_ctrl) to calculate transfer_buffer_length as 16384. When this urb is passed to the usb core layer, KMSAN reports an info leak of 16384 bytes.
To fix this, first modify hid_report_len() to account for the zero report size case by using DIV_ROUND_UP for the division. Then, call it from hid_submit_ctrl().
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headers | Mar 19, 2024 | Feb 26, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | May 13, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-tools | Jul 23, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Jul 17, 2024 | Feb 26, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade kernel-preemptUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-azure-baseUpgrade kernel-syms-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-preempt-develUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-default-manUpgrade kernel-source | Aug 9, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-awsUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-virtual | Nov 19, 2024 | Feb 26, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub