In the Linux kernel, the following vulnerability has been resolved:
net: USB: Fix wrong-direction WARNING in plusb.c
The syzbot fuzzer detected a bug in the plusb network driver: A zero-length control-OUT transfer was treated as a read instead of a write. In modern kernels this error provokes a WARNING:
usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 WARNING: CPU: 0 PID: 4645 at drivers/usb/core/urb.c:411 usb_submit_urb+0x14a7/0x1880 drivers/usb/core/urb.c:411 Modules linked in: CPU: 1 PID: 4645 Comm: dhcpcd Not tainted 6.2.0-rc6-syzkaller-00050-g9f266ccaa2f5 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 RIP: 0010:usb_submit_urb+0x14a7/0x1880 drivers/usb/core/urb.c:411 ... Call Trace: <TASK> usb_start_wait_urb+0x101/0x4b0 drivers/usb/core/message.c:58 usb_internal_control_msg drivers/usb/core/message.c:102 [inline] usb_control_msg+0x320/0x4a0 drivers/usb/core/message.c:153 __usbnet_read_cmd+0xb9/0x390 drivers/net/usb/usbnet.c:2010 usbnet_read_cmd+0x96/0xf0 drivers/net/usb/usbnet.c:2068 pl_vendor_req drivers/net/usb/plusb.c:60 [inline] pl_set_QuickLink_features drivers/net/usb/plusb.c:75 [inline] pl_reset+0x2f/0xf0 drivers/net/usb/plusb.c:85 usbnet_open+0xcc/0x5d0 drivers/net/usb/usbnet.c:889 __dev_open+0x297/0x4d0 net/core/dev.c:1417 __dev_change_flags+0x587/0x750 net/core/dev.c:8530 dev_change_flags+0x97/0x170 net/core/dev.c:8602 devinet_ioctl+0x15a2/0x1d70 net/ipv4/devinet.c:1147 inet_ioctl+0x33f/0x380 net/ipv4/af_inet.c:979 sock_do_ioctl+0xcc/0x230 net/socket.c:1169 sock_ioctl+0x1f8/0x680 net/socket.c:1286 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x197/0x210 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd
The fix is to call usbnet_write_cmd() instead of usbnet_read_cmd() and remove the USB_DIR_IN flag.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.309-231.529Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.173-154.642Upgrade bpftool | May 21, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Nov 5, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jan 15, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatchUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-debugUpgrade dtb-rockchipUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-manUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade dtb-amdUpgrade dtb-appleUpgrade kernel-source-azureUpgrade dtb-caviumUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade dtb-qcomUpgrade ocfs2-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amazonUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade cluster-md-kmp-azureUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade dtb-alteraUpgrade dtb-marvellUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade kernel-azure-baseUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-default-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-devel | Jun 12, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-intel-iot-realtimeUpgrade linux-hweUpgrade linux-azure-fdeUpgrade linux-intel-iotgUpgrade linux-fipsUpgrade linux-riscv-5.15Upgrade linux-gcpUpgrade linux-azure-5.4Upgrade linux-gcp-4.15Upgrade linux-gcp-fipsUpgrade linux-awsUpgrade linux-bluefieldUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-5.15Upgrade linux-raspi-5.4Upgrade linux-kvmUpgrade linux-lowlatency-hwe-5.15Upgrade linux-azure-4.15Upgrade linux-aws-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-realtimeUpgrade linux-gkeop-5.15Upgrade linux-gkeUpgrade linux-gkeopUpgrade linux-oracle-5.4Upgrade linux-hwe-5.15Upgrade linux-aws-fipsUpgrade linux-nvidiaUpgrade linux-oracle-5.15Upgrade linux-ibmUpgrade linux-iotUpgrade linux-oracleUpgrade linux-ibm-5.4Upgrade linux-aws-hweUpgrade linux-azureUpgrade linuxUpgrade linux-hwe-5.4Upgrade linux-lowlatencyUpgrade linux-aws-5.4Upgrade linux-gcp-5.4Upgrade linux-azure-5.15Upgrade linux-azure-fipsUpgrade linux-raspiUpgrade linux-xilinx-zynqmp | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub