In the Linux kernel, the following vulnerability has been resolved:
HID: betop: fix slab-out-of-bounds Write in betop_probe
Syzbot reported slab-out-of-bounds Write bug in hid-betopff driver. The problem is the driver assumes the device must have an input report but some malicious devices violate this assumption.
So this patch checks hid_device's input is non empty before it's been used.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.252-195.481Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade python-perfUpgrade bpftool | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade dtb-rockchipUpgrade kernel-symsUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-preempt-develUpgrade dtb-apmUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade dtb-renesasUpgrade dtb-armUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-preemptUpgrade cluster-md-kmp-azureUpgrade kernel-defaultUpgrade kernel-debugUpgrade dtb-mediatekUpgrade kernel-sourceUpgrade dtb-caviumUpgrade dlm-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade kernel-azure-extraUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-azure-baseUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-azureUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade dtb-broadcomUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-lgUpgrade dtb-alteraUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatchUpgrade kernel-azure-livepatch-develUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade dtb-sprdUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade dtb-amazonUpgrade kernel-rt-extra | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-raspiUpgrade linuxUpgrade linux-azure-4.15Upgrade linux-oracle-5.4Upgrade linux-gcp-5.4Upgrade linux-gcp-4.15Upgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-aws-5.4Upgrade linux-kvmUpgrade linux-fipsUpgrade linux-oracleUpgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-azure-fde-5.15Upgrade linux-aws-hweUpgrade linux-gcp-fipsUpgrade linux-ibmUpgrade linux-hweUpgrade linux-azure-5.4 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub