In the Linux kernel, the following vulnerability has been resolved:
comedi: ni_usb6501: fix NULL-deref in command paths
The driver uses endpoint-sized USB transfer buffers but had no sanity checks on the sizes. This can lead to zero-size-pointer dereferences or overflowed transfer buffers in ni6501_port_command() and ni6501_counter_command() if a (malicious) device has smaller max-packet sizes than expected (or when doing descriptor fuzz testing).
Add the missing sanity checks to probe().
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kernel-devel-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade kernel-rt-develUpgrade ocfs2-kmp-64kbUpgrade kernel-docsUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-source-rtUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-alteraUpgrade kernel-rt-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-rt-optionalUpgrade dtb-xilinxUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-amdUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-qcomUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade dtb-armUpgrade kernel-syms-azureUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade kernel-macrosUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-lg | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-aws-5.4Upgrade linux-ibmUpgrade linux-fipsUpgrade linux-gkeopUpgrade linux-kvmUpgrade linux-oracle-5.4Upgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-oracleUpgrade linux-aws-hweUpgrade linux-aws-fipsUpgrade linux-raspiUpgrade linux-hwe-5.4Upgrade linuxUpgrade linux-azure-4.15Upgrade linux-azure-5.4Upgrade linux-hweUpgrade linux-awsUpgrade linux-ibm-5.4Upgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-gcpUpgrade linux-azureUpgrade linux-gcp-4.15Upgrade linux-raspi-5.4 | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub