The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
comedi: ni_usb6501: fix NULL-deref in command paths
The driver uses endpoint-sized USB transfer buffers but had no sanity checks on the sizes. This can lead to zero-size-pointer dereferences or overflowed transfer buffers in ni6501_port_command() and ni6501_counter_command() if a (malicious) device has smaller max-packet sizes than expected (or when doing descriptor fuzz testing).
Add the missing sanity checks to probe().
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-debugUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-xilinxUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-rt-develUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade kernel-develUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade kernel-devel-rtUpgrade dtb-amlogicUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade dtb-qcomUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade dtb-rockchipUpgrade gfs2-kmp-64kbUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-symsUpgrade kernel-64kbUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade dtb-freescale | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-ibm-5.4Upgrade linux-azure-5.4Upgrade linux-awsUpgrade linuxUpgrade linux-raspi-5.4Upgrade linux-hweUpgrade linux-gcp-4.15Upgrade linux-gcpUpgrade linux-azureUpgrade linux-azure-4.15Upgrade linux-kvmUpgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux-raspiUpgrade linux-fipsUpgrade linux-aws-5.4Upgrade linux-ibmUpgrade linux-oracleUpgrade linux-aws-hweUpgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-oracle-5.4Upgrade linux-hwe-5.4 | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub