In the Linux kernel, the following vulnerability has been resolved:
usb: fix various gadgets null ptr deref on 10gbps cabling.
This avoids a null pointer dereference in f_{ecm,eem,hid,loopback,printer,rndis,serial,sourcesink,subset,tcm} by simply reusing the 5gbps config for 10gbps.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-default-manUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade kernel-preemptUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-preempt-develUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade kernel-obs-build | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linuxUpgrade linux-azureUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linux-oracleUpgrade linux-oracle-5.4Upgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-fipsUpgrade linux-gcp-4.15Upgrade linux-awsUpgrade linux-hweUpgrade linux-bluefieldUpgrade linux-azure-4.15Upgrade linux-gcp-fipsUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-raspi-5.4 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub