In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernelUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.10-15.42 | Feb 17, 2025 | Mar 16, 2022 |
| Debian | — | Upgrade linux | Jul 4, 2022 | Mar 16, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Jun 7, 2022 | Mar 16, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Jun 16, 2022 | Mar 16, 2022 |
| Suse | — | Upgrade cluster-md-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-default | Oct 26, 2022 | Mar 16, 2022 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1071-oracleUpgrade linux-image-5.4.0-110-lowlatencyUpgrade linux-image-4.15.0-1122-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1105-kvmUpgrade linux-image-gkeop-5.4Upgrade linux-image-gkeopUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.13.0-41-lowlatencyUpgrade linux-image-5.4.0-1071-gkeUpgrade linux-image-4.15.0-1093-oracleUpgrade linux-image-4.15.0-1127-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1040-gkeopUpgrade linux-image-5.13.0-1028-oracleUpgrade linux-image-5.13.0-1022-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-20.04Upgrade linux-image-oracleUpgrade linux-image-4.4.0-1140-awsUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1042-dell300xUpgrade linux-image-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.13.0-1026-raspi-nolpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.13.0-1023-azureUpgrade linux-image-4.15.0-1128-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.4.0-224-lowlatencyUpgrade linux-image-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.14.0-1033-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1073-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-awsUpgrade linux-image-oemUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.13.0-41-generic-64kUpgrade linux-image-5.4.0-1063-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-raspiUpgrade linux-image-dell300xUpgrade linux-image-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-177-generic-lpaeUpgrade linux-image-5.13.0-41-generic-lpaeUpgrade linux-image-4.15.0-1128-aws-hweUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-224-genericUpgrade linux-image-5.4.0-1078-azure-fdeUpgrade linux-image-5.13.0-1023-awsUpgrade linux-image-gke-5.4Upgrade linux-image-azureUpgrade linux-image-4.15.0-177-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1078-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1060-raspiUpgrade linux-image-5.4.0-110-genericUpgrade linux-image-kvmUpgrade linux-image-5.13.0-41-genericUpgrade linux-image-5.13.0-1025-gcpUpgrade linux-image-4.15.0-1114-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-110-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1073-gcpUpgrade linux-image-4.15.0-1138-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1021-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.13.0-1026-raspiUpgrade linux-image-4.15.0-177-generic | Apr 21, 2022 | Mar 16, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 15, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub