In the Linux kernel, the following vulnerability has been resolved:
usb: atm: cxacru: fix a flaw in existing endpoint checks
Syzbot once again identified a flaw in usb endpoint checking, see [1]. This time the issue stems from a commit authored by me (2eabb655a968 ("usb: atm: cxacru: fix endpoint checking in cxacru_bind()")).
While using usb_find_common_endpoints() may usually be enough to discard devices with wrong endpoints, in this case one needs more than just finding and identifying the sufficient number of endpoints of correct types - one needs to check the endpoint's address as well.
Since cxacru_bind() fills URBs with CXACRU_EP_CMD address in mind, switch the endpoint verification approach to usb_check_XXX_endpoints() instead to fix incomplete ep testing.
[1] Syzbot report: usb 5-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 0 PID: 1378 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc4e/0x18c0 drivers/usb/core/urb.c:503 ... RIP: 0010:usb_submit_urb+0xc4e/0x18c0 drivers/usb/core/urb.c:503 ... Call Trace: <TASK> cxacru_cm+0x3c8/0xe50 drivers/usb/atm/cxacru.c:649 cxacru_card_status drivers/usb/atm/cxacru.c:760 [inline] cxacru_bind+0xcf9/0x1150 drivers/usb/atm/cxacru.c:1223 usbatm_usb_probe+0x314/0x1d30 drivers/usb/atm/usbatm.c:1058 cxacru_usb_probe+0x184/0x220 drivers/usb/atm/cxacru.c:1377 usb_probe_interface+0x641/0xbb0 drivers/usb/core/driver.c:396 really_probe+0x2b9/0xad0 drivers/base/dd.c:658 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:800 driver_probe_device+0x50/0x430 drivers/base/dd.c:830 ...
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.235-227.919Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Apr 1, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 1, 2025 |
| Suse | — | Upgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade dtb-apmUpgrade kernel-macrosUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade kernel-rtUpgrade gfs2-kmp-azureUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-symsUpgrade dtb-amazonUpgrade kernel-source-rtUpgrade dtb-alteraUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kernel-syms-rtUpgrade dtb-mediatekUpgrade kernel-debugUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-rockchipUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade cluster-md-kmp-defaultUpgrade dtb-sprdUpgrade dtb-appleUpgrade kernel-default-manUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-64kb-develUpgrade dtb-socionext | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-osp1Upgrade linux-image-gcp-fipsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-aws-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1105-bluefieldUpgrade linux-image-5.4.0-1146-aws-fipsUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-5.4.0-1051-iotUpgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-85-genericUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-5.4.0-1064-xilinx-zynqmpUpgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-azure-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-gcpUpgrade linux-image-lowlatency-6.11Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-azure-fde-6.11Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-5.4.0-1144-oracleUpgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-gke-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-5.4.0-1151-azure-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-azureUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gke-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-5.15.0-1089-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.4.0-1120-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-216-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-5.4.0-1149-gcpUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-6.8.0-1039-awsUpgrade linux-image-oracleUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oemUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.4.0-1133-kvmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.4.0-1149-gcp-fipsUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-84-genericUpgrade linux-image-aws-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-virtualUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1146-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-azure-6.11Upgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-5.4.0-1092-ibmUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-genericUpgrade linux-image-azure-fde-edgeUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-5.4.0-216-genericUpgrade linux-image-5.4.0-1151-azureUpgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-intelUpgrade linux-image-aws-fipsUpgrade linux-image-fipsUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-5.4.0-216-lowlatencyUpgrade linux-image-azure-lts-20.04 | May 20, 2025 | Apr 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub