In the Linux kernel, the following vulnerability has been resolved:
HID: betop: fix slab-out-of-bounds Write in betop_probe
Syzbot reported slab-out-of-bounds Write bug in hid-betopff driver. The problem is the driver assumes the device must have an input report but some malicious devices violate this assumption.
So this patch checks hid_device's input is non empty before it's been used.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.252-195.481Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernelUpgrade kernel-headers | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade dtb-amlogicUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade dtb-appleUpgrade kernel-debug-vdsoUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-default-develUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-amazonUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade dtb-sprdUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kselftests-kmp-rtUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade dtb-lgUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-syms-rtUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade kernel-preempt-develUpgrade kernel-debugUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-preemptUpgrade dlm-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade kernel-64kb-optionalUpgrade kernel-default-optionalUpgrade dtb-apmUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-develUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-obs-qaUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade kernel-symsUpgrade kernel-rt-livepatch | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-ibmUpgrade linux-fipsUpgrade linux-gcp-fipsUpgrade linux-azure-fipsUpgrade linux-oracleUpgrade linux-gcpUpgrade linux-azure-fde-5.15Upgrade linux-azure-5.4Upgrade linux-aws-hweUpgrade linux-azureUpgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-hweUpgrade linux-aws-5.4Upgrade linux-kvmUpgrade linux-aws-fipsUpgrade linux-gcp-5.4Upgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-raspi-5.4Upgrade linux-azure-4.15Upgrade linux-gcp-4.15Upgrade linuxUpgrade linux-aws | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub