In the Linux kernel, the following vulnerability has been resolved:
HID: usbhid: fix info leak in hid_submit_ctrl
In hid_submit_ctrl(), the way of calculating the report length doesn't take into account that report->size can be zero. When running the syzkaller reproducer, a report of size 0 causes hid_submit_ctrl) to calculate transfer_buffer_length as 16384. When this urb is passed to the usb core layer, KMSAN reports an info leak of 16384 bytes.
To fix this, first modify hid_report_len() to account for the zero report size case by using DIV_ROUND_UP for the division. Then, call it from hid_submit_ctrl().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perf | Mar 19, 2024 | Feb 26, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | May 13, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python3-perfUpgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade bpftoolUpgrade python-perf | Jul 23, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jul 17, 2024 | Feb 26, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2024 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade kernel-preemptUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-preempt-develUpgrade kernel-default-develUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-azureUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-syms | Aug 9, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-virtualUpgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-awsUpgrade linux-image-kvm | Nov 19, 2024 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub