In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-livepatch-6.1.10-15.42Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpf | Feb 17, 2025 | Mar 16, 2022 |
| Debian | — | Upgrade linux | Jul 4, 2022 | Mar 16, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jun 7, 2022 | Mar 16, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jun 16, 2022 | Mar 16, 2022 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade kernel-symsUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-64kb-devel | Oct 26, 2022 | Mar 16, 2022 |
| Ubuntu | — | Upgrade linux-image-ibmUpgrade linux-image-4.15.0-1122-gcpUpgrade linux-image-4.15.0-1042-dell300xUpgrade linux-image-5.4.0-110-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-4.4.0-1105-kvmUpgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.13.0-1023-azureUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-1128-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1071-oracleUpgrade linux-image-4.15.0-1093-oracleUpgrade linux-image-virtualUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-5.14.0-1033-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.13.0-1026-raspi-nolpaeUpgrade linux-image-5.13.0-1022-kvmUpgrade linux-image-4.4.0-224-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1127-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1040-gkeopUpgrade linux-image-4.4.0-1140-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1071-gkeUpgrade linux-image-5.13.0-41-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.13.0-1028-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.13.0-1025-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.13.0-41-generic-lpaeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1138-azureUpgrade linux-image-5.13.0-41-genericUpgrade linux-image-5.4.0-110-genericUpgrade linux-image-5.4.0-1060-raspiUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-110-generic-lpaeUpgrade linux-image-4.15.0-177-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1073-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1128-aws-hweUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.13.0-1023-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1078-azure-fdeUpgrade linux-image-5.4.0-1021-ibmUpgrade linux-image-5.4.0-1078-azureUpgrade linux-image-dell300xUpgrade linux-image-5.4.0-1063-kvmUpgrade linux-image-snapdragonUpgrade linux-image-5.13.0-1026-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-177-lowlatencyUpgrade linux-image-5.4.0-1073-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.13.0-41-generic-64kUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-177-genericUpgrade linux-image-4.4.0-224-genericUpgrade linux-image-4.15.0-1114-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem | Apr 21, 2022 | Mar 16, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 15, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub