In the Linux kernel, the following vulnerability has been resolved:
comedi: dt9812: fix DMA buffers on stack
USB transfer buffers are typically mapped for DMA and must not be allocated on the stack or transfers will fail.
Allocate proper transfer buffers in the various command helpers and return an error on short transfers instead of acting on random stack data.
Note that this also fixes a stack info leak on systems where DMA is not used as 32 bytes are always sent to the device regardless of how short the command is.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Suse | — | Upgrade dtb-armUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade dtb-sprdUpgrade kernel-64kbUpgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade dtb-amazonUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-debugUpgrade dlm-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-marvellUpgrade dtb-exynosUpgrade dtb-nvidiaUpgrade kselftests-kmp-azureUpgrade dtb-qcomUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade reiserfs-kmp-64kb | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-azure-5.4Upgrade linux-azure-4.15Upgrade linux-kvmUpgrade linux-oracle-5.4Upgrade linux-azureUpgrade linux-aws-hweUpgrade linux-aws-5.4Upgrade linux-oracleUpgrade linux-raspiUpgrade linux-aws-fipsUpgrade linux-bluefieldUpgrade linux-awsUpgrade linux-fipsUpgrade linux-raspi-5.4Upgrade linux-ibm-5.4Upgrade linux-hwe-5.4Upgrade linux-gcp-4.15Upgrade linux-ibmUpgrade linux-hweUpgrade linux-gcp-5.4Upgrade linux-gcpUpgrade linux-azure-fipsUpgrade linuxUpgrade linux-gkeopUpgrade linux-gcp-fips | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub