In the Linux kernel, the following vulnerability has been resolved:
USB: usbfs: Don't WARN about excessively large memory allocations
Syzbot found that the kernel generates a WARNing if the user tries to submit a bulk transfer through usbfs with a buffer that is way too large. This isn't a bug in the kernel; it's merely an invalid request from the user and the usbfs code does handle it correctly.
In theory the same thing can happen with async transfers, or with the packet descriptor table for isochronous transfers.
To prevent the MM subsystem from complaining about these bad allocation requests, add the __GFP_NOWARN flag to the kmalloc calls for these buffers.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perf | Aug 2, 2024 | Mar 25, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jul 16, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python-perf | Jul 23, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jul 17, 2024 | Mar 25, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-preemptUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-preempt-develUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-default-base | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-azureUpgrade linux-azure-fde-5.15Upgrade linuxUpgrade linux-raspiUpgrade linux-azure-4.15Upgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-azure-5.4Upgrade linux-aws-5.4Upgrade linux-aws-hweUpgrade linux-gcp-4.15Upgrade linux-hweUpgrade linux-fipsUpgrade linux-gcp-5.4Upgrade linux-oracleUpgrade linux-hwe-5.4Upgrade linux-kvmUpgrade linux-gcp-fipsUpgrade linux-gcpUpgrade linux-bluefieldUpgrade linux-oracle-5.4Upgrade linux-raspi-5.4 | Nov 19, 2024 | Mar 25, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub