In the Linux kernel, the following vulnerability has been resolved:
HID: usbhid: fix info leak in hid_submit_ctrl
In hid_submit_ctrl(), the way of calculating the report length doesn't take into account that report->size can be zero. When running the syzkaller reproducer, a report of size 0 causes hid_submit_ctrl) to calculate transfer_buffer_length as 16384. When this urb is passed to the usb core layer, KMSAN reports an info leak of 16384 bytes.
To fix this, first modify hid_report_len() to account for the zero report size case by using DIV_ROUND_UP for the division. Then, call it from hid_submit_ctrl().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.238-182.421Upgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfo | Mar 19, 2024 | Feb 26, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | May 13, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-develUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-tools-libs | Jul 23, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jul 17, 2024 | Feb 26, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2024 |
| Suse | — | Upgrade kernel-preemptUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-azure-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-preempt-develUpgrade kernel-64kbUpgrade kernel-azureUpgrade kernel-syms-azureUpgrade kernel-default-man | Aug 9, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-genericUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-lowlatency | Nov 19, 2024 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub