In the Linux kernel, the following vulnerability has been resolved:
usb: mtu3: fix list_head check warning
This is caused by uninitialization of list_head.
BUG: KASAN: use-after-free in __list_del_entry_valid+0x34/0xe4
Call trace: dump_backtrace+0x0/0x298 show_stack+0x24/0x34 dump_stack+0x130/0x1a8 print_address_description+0x88/0x56c __kasan_report+0x1b8/0x2a0 kasan_report+0x14/0x20 __asan_load8+0x9c/0xa0 __list_del_entry_valid+0x34/0xe4 mtu3_req_complete+0x4c/0x300 [mtu3] mtu3_gadget_stop+0x168/0x448 [mtu3] usb_gadget_unregister_driver+0x204/0x3a0 unregister_gadget_item+0x44/0xa4
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 27, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-vdsoUpgrade dtb-caviumUpgrade kernel-kvmsmall-develUpgrade dtb-renesasUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-source-rtUpgrade gfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade kernel-preempt-develUpgrade kernel-sourceUpgrade gfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade dtb-lgUpgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade kernel-rt-vdsoUpgrade dtb-amdUpgrade dtb-alteraUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade kernel-64kb-develUpgrade kernel-preemptUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade kernel-azure-livepatch-develUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-azure-develUpgrade kernel-develUpgrade dtb-apmUpgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-symsUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade dtb-amlogicUpgrade ocfs2-kmp-rtUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade dtb-rockchipUpgrade kernel-syms-azure | Aug 9, 2024 | Feb 27, 2024 |
| Ubuntu | — | Upgrade linux-azure-fipsUpgrade linux-azure-5.4Upgrade linux-kvmUpgrade linux-oracleUpgrade linux-gcp-5.4Upgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linux-gcp-fipsUpgrade linux-ibmUpgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-gcpUpgrade linux-aws-5.4Upgrade linuxUpgrade linux-bluefieldUpgrade linux-raspiUpgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-raspi-5.4Upgrade linux-fipsUpgrade linux-ibm-5.4 | Nov 19, 2024 | Feb 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub