In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-livepatch-6.1.10-15.42Upgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Mar 16, 2022 |
| Debian | — | Upgrade linux | Jul 4, 2022 | Mar 16, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Jun 7, 2022 | Mar 16, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jun 16, 2022 | Mar 16, 2022 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-azure-extraUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-azure | Oct 26, 2022 | Mar 16, 2022 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1073-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1063-kvmUpgrade linux-image-4.15.0-1114-kvmUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1073-gcpUpgrade linux-image-5.13.0-1025-gcpUpgrade linux-image-4.4.0-224-genericUpgrade linux-image-5.13.0-1026-raspiUpgrade linux-image-5.4.0-1021-ibmUpgrade linux-image-5.4.0-110-generic-lpaeUpgrade linux-image-4.15.0-177-genericUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1078-azureUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1078-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.13.0-41-genericUpgrade linux-image-4.15.0-1128-aws-hweUpgrade linux-image-oemUpgrade linux-image-aws-hweUpgrade linux-image-generic-64kUpgrade linux-image-snapdragonUpgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-177-generic-lpaeUpgrade linux-image-5.13.0-1023-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.13.0-41-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-110-genericUpgrade linux-image-5.13.0-41-generic-64kUpgrade linux-image-4.15.0-1138-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1060-raspiUpgrade linux-image-4.15.0-177-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-dell300xUpgrade linux-image-gke-5.4Upgrade linux-image-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azureUpgrade linux-image-5.13.0-1022-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1040-gkeopUpgrade linux-image-virtualUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1042-dell300xUpgrade linux-image-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1105-kvmUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-1122-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1071-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-4.4.0-224-lowlatencyUpgrade linux-image-5.14.0-1033-oemUpgrade linux-image-4.15.0-1093-oracleUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.13.0-1023-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1128-awsUpgrade linux-image-oracleUpgrade linux-image-ibmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-110-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-1127-snapdragonUpgrade linux-image-5.13.0-41-lowlatencyUpgrade linux-image-5.4.0-1071-gkeUpgrade linux-image-4.4.0-1140-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.13.0-1026-raspi-nolpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.13.0-1028-oracleUpgrade linux-image-lowlatency-hwe-20.04 | Apr 21, 2022 | Mar 16, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 15, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub