In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfoUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-libbpf | Feb 17, 2025 | Mar 16, 2022 |
| Debian | — | Upgrade linux | Jul 4, 2022 | Mar 16, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jun 7, 2022 | Mar 16, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Jun 16, 2022 | Mar 16, 2022 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade kernel-devel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-docs | Oct 26, 2022 | Mar 16, 2022 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1128-aws-hweUpgrade linux-image-5.13.0-1026-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1021-ibmUpgrade linux-image-kvmUpgrade linux-image-snapdragonUpgrade linux-image-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1073-gcpUpgrade linux-image-4.15.0-177-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-110-generic-lpaeUpgrade linux-image-5.4.0-1078-azureUpgrade linux-image-5.13.0-1025-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oemUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.13.0-1023-awsUpgrade linux-image-4.15.0-177-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1078-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1073-awsUpgrade linux-image-5.13.0-41-generic-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-azureUpgrade linux-image-dell300xUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1063-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-110-genericUpgrade linux-image-5.4.0-1060-raspiUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1138-azureUpgrade linux-image-awsUpgrade linux-image-5.13.0-41-genericUpgrade linux-image-4.15.0-1114-kvmUpgrade linux-image-4.4.0-224-genericUpgrade linux-image-5.13.0-41-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-177-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1105-kvmUpgrade linux-image-5.13.0-1023-azureUpgrade linux-image-5.4.0-1071-gkeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1127-snapdragonUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1071-oracleUpgrade linux-image-5.13.0-41-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1093-oracleUpgrade linux-image-4.15.0-1042-dell300xUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1140-awsUpgrade linux-image-5.4.0-110-lowlatencyUpgrade linux-image-4.15.0-1122-gcpUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-4.4.0-224-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-gkeopUpgrade linux-image-5.14.0-1033-oemUpgrade linux-image-5.4.0-1040-gkeopUpgrade linux-image-5.13.0-1022-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.13.0-1028-oracleUpgrade linux-image-gkeUpgrade linux-image-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.13.0-1026-raspi-nolpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1128-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic | Apr 21, 2022 | Mar 16, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 15, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub