In the Linux kernel, the following vulnerability has been resolved:
HID: betop: fix slab-out-of-bounds Write in betop_probe
Syzbot reported slab-out-of-bounds Write bug in hid-betopff driver. The problem is the driver assumes the device must have an input report but some malicious devices violate this assumption.
So this patch checks hid_device's input is non empty before it's been used.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-livepatch-4.14.252-195.481Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-devel | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatchUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade kernel-debugUpgrade kernel-symsUpgrade dtb-renesasUpgrade kselftests-kmp-64kbUpgrade kernel-preemptUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-develUpgrade dtb-caviumUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-docsUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade cluster-md-kmp-azureUpgrade kernel-obs-qaUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-preempt-develUpgrade kernel-64kb-develUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-marvellUpgrade dtb-amdUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-appleUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade dtb-alteraUpgrade reiserfs-kmp-rtUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade dtb-amazonUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade kernel-default-manUpgrade kernel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kselftests-kmp-azureUpgrade kernel-azure-base | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gcp-4.15Upgrade linux-gcp-5.4Upgrade linux-raspi-5.4Upgrade linux-raspiUpgrade linux-bluefieldUpgrade linuxUpgrade linux-azure-4.15Upgrade linux-oracle-5.4Upgrade linux-awsUpgrade linux-azure-fde-5.15Upgrade linux-hweUpgrade linux-gcpUpgrade linux-oracleUpgrade linux-fipsUpgrade linux-ibmUpgrade linux-azure-fipsUpgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-azureUpgrade linux-aws-5.4Upgrade linux-gcp-fipsUpgrade linux-azure-5.4Upgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-aws-hwe | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub