In the Linux kernel, the following vulnerability has been resolved:
HID: usbhid: fix info leak in hid_submit_ctrl
In hid_submit_ctrl(), the way of calculating the report length doesn't take into account that report->size can be zero. When running the syzkaller reproducer, a report of size 0 causes hid_submit_ctrl) to calculate transfer_buffer_length as 16384. When this urb is passed to the usb core layer, KMSAN reports an info leak of 16384 bytes.
To fix this, first modify hid_report_len() to account for the zero report size case by using DIV_ROUND_UP for the division. Then, call it from hid_submit_ctrl().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Mar 19, 2024 | Feb 26, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | May 13, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python3-perfUpgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Jul 23, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jul 17, 2024 | Feb 26, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-preemptUpgrade kernel-obs-buildUpgrade kernel-64kb-develUpgrade kernel-default-manUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade kernel-preempt-develUpgrade kernel-sourceUpgrade kernel-azure-base | Aug 9, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-virtualUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-4.4.0-1136-kvm | Nov 19, 2024 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub