In the Linux kernel, the following vulnerability has been resolved:
HID: betop: fix slab-out-of-bounds Write in betop_probe
Syzbot reported slab-out-of-bounds Write bug in hid-betopff driver. The problem is the driver assumes the device must have an input report but some malicious devices violate this assumption.
So this patch checks hid_device's input is non empty before it's been used.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-4.14.252-195.481Upgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perfUpgrade perfUpgrade bpftool | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-preempt-develUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-azureUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-armUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade kernel-devel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-preemptUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-rt-livepatch-develUpgrade dtb-alteraUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-syms-azureUpgrade kernel-default-manUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade dtb-socionextUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-azureUpgrade kernel-rtUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-64kb-extraUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade kernel-azure-base | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-raspi-5.4Upgrade linux-oracle-5.4Upgrade linuxUpgrade linux-awsUpgrade linux-azure-4.15Upgrade linux-bluefieldUpgrade linux-gcp-4.15Upgrade linux-raspiUpgrade linux-gcp-5.4Upgrade linux-gcp-fipsUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-aws-5.4Upgrade linux-azure-fipsUpgrade linux-azure-fde-5.15Upgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-fipsUpgrade linux-hweUpgrade linux-gkeopUpgrade linux-hwe-5.4Upgrade linux-gcpUpgrade linux-aws-hweUpgrade linux-azure-5.4Upgrade linux-azure | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub