In the Linux kernel, the following vulnerability has been resolved:
comedi: ni_usb6501: fix NULL-deref in command paths
The driver uses endpoint-sized USB transfer buffers but had no sanity checks on the sizes. This can lead to zero-size-pointer dereferences or overflowed transfer buffers in ni6501_port_command() and ni6501_counter_command() if a (malicious) device has smaller max-packet sizes than expected (or when doing descriptor fuzz testing).
Add the missing sanity checks to probe().
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-symsUpgrade dtb-freescaleUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade dtb-qcomUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dlm-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade dtb-lgUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-rtUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-64kbUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade dtb-nvidiaUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade dtb-caviumUpgrade dtb-sprdUpgrade kernel-develUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-devel | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-awsUpgrade linux-ibm-5.4Upgrade linux-bluefieldUpgrade linuxUpgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-gcp-fipsUpgrade linux-azure-4.15Upgrade linux-azure-5.4Upgrade linux-gcp-4.15Upgrade linux-hweUpgrade linux-kvmUpgrade linux-aws-hweUpgrade linux-oracle-5.4Upgrade linux-gkeopUpgrade linux-raspiUpgrade linux-gcp-5.4Upgrade linux-aws-fipsUpgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-aws-5.4Upgrade linux-ibmUpgrade linux-hwe-5.4Upgrade linux-oracle | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub