In the Linux kernel, the following vulnerability has been resolved:
comedi: dt9812: fix DMA buffers on stack
USB transfer buffers are typically mapped for DMA and must not be allocated on the stack or transfers will fail.
Allocate proper transfer buffers in the various command helpers and return an error on short transfers instead of acting on random stack data.
Note that this also fixes a stack info leak on systems where DMA is not used as 32 bytes are always sent to the device regardless of how short the command is.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Suse | — | Upgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-amdUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-default-develUpgrade kselftests-kmp-rtUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-amazonUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-rt-extraUpgrade kselftests-kmp-defaultUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade dtb-apmUpgrade kernel-source-azureUpgrade dtb-marvellUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-develUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-rt-optionalUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-docs | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-azure-5.4Upgrade linux-aws-hweUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-kvmUpgrade linux-oracleUpgrade linux-azureUpgrade linux-azure-4.15Upgrade linux-raspiUpgrade linuxUpgrade linux-awsUpgrade linux-gcp-4.15Upgrade linux-hweUpgrade linux-aws-fipsUpgrade linux-raspi-5.4Upgrade linux-gcp-fipsUpgrade linux-bluefieldUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-gcp-5.4Upgrade linux-ibmUpgrade linux-gkeopUpgrade linux-hwe-5.4Upgrade linux-azure-fipsUpgrade linux-ibm-5.4 | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub