In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-livepatch-6.1.10-15.42Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools | Feb 17, 2025 | Mar 16, 2022 |
| Debian | — | Upgrade linux | Jul 4, 2022 | Mar 16, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Jun 7, 2022 | Mar 16, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jun 16, 2022 | Mar 16, 2022 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade kernel-devel-azureUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-syms | Oct 26, 2022 | Mar 16, 2022 |
| Ubuntu | — | Upgrade linux-image-gkeop-5.4Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.13.0-1023-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-4.15.0-1128-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-224-lowlatencyUpgrade linux-image-5.4.0-110-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1105-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1122-gcpUpgrade linux-image-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1042-dell300xUpgrade linux-image-4.15.0-1093-oracleUpgrade linux-image-5.14.0-1033-oemUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1071-gkeUpgrade linux-image-4.15.0-1127-snapdragonUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1071-oracleUpgrade linux-image-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1040-gkeopUpgrade linux-image-gcpUpgrade linux-image-5.13.0-1026-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.13.0-1028-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi2Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04Upgrade linux-image-5.13.0-1022-kvmUpgrade linux-image-5.13.0-41-lowlatencyUpgrade linux-image-4.4.0-1140-awsUpgrade linux-image-awsUpgrade linux-image-5.4.0-1078-azureUpgrade linux-image-4.15.0-177-genericUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-dell300xUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.13.0-1025-gcpUpgrade linux-image-5.4.0-110-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.13.0-41-generic-64kUpgrade linux-image-5.13.0-41-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1060-raspiUpgrade linux-image-5.4.0-110-genericUpgrade linux-image-4.15.0-1138-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1128-aws-hweUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1063-kvmUpgrade linux-image-5.13.0-1023-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-224-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-1114-kvmUpgrade linux-image-5.4.0-1073-gcpUpgrade linux-image-4.15.0-177-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-4.15.0-177-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1073-awsUpgrade linux-image-aws-hweUpgrade linux-image-5.13.0-41-generic-lpaeUpgrade linux-image-5.13.0-1026-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1021-ibmUpgrade linux-image-snapdragonUpgrade linux-image-oemUpgrade linux-image-5.4.0-1078-azure-fdeUpgrade linux-image-gke-5.4 | Apr 21, 2022 | Mar 16, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 15, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub