An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to crash or potentially escalate their privileges on the system. It is in bigben_probe of drivers/hid/hid-bigbenff.c. The reason is incorrect assumption - bigben devices all have inputs. However, malicious devices can break this assumption, leaking to out-of-bound write.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 20, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools | Jan 6, 2023 | Oct 20, 2022 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-preemptUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade dtb-zteUpgrade ocfs2-kmp-preemptUpgrade dtb-qcomUpgrade kernel-preempt-optionalUpgrade kernel-symsUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-preempt-livepatch-develUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-preemptUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade dtb-rockchipUpgrade cluster-md-kmp-preemptUpgrade kernel-debug-develUpgrade kernel-preempt-develUpgrade dtb-apmUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade dtb-alUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-amdUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-syms-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-preempt-extraUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-rtUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade kernel-azure-optionalUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-source-rtUpgrade dtb-amlogicUpgrade reiserfs-kmp-preemptUpgrade dtb-appleUpgrade kernel-obs-buildUpgrade dlm-kmp-preemptUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-preemptUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-azure-devel | Nov 9, 2022 | Oct 20, 2022 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linuxUpgrade linux-hwe-5.15Upgrade linux-oem-5.14Upgrade linux-hwe-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-iotUpgrade linux-bluefieldUpgrade linux-azure-fdeUpgrade linux-ibm-5.4Upgrade linux-azure-5.4Upgrade linux-gcp-5.4Upgrade linux-raspi-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-awsUpgrade linux-oem-5.17Upgrade linux-azureUpgrade linux-oracle-5.15Upgrade linux-gcpUpgrade linux-nvidiaUpgrade linux-gcp-5.15Upgrade linux-kvmUpgrade linux-lowlatencyUpgrade linux-aws-5.15Upgrade linux-riscv-5.15Upgrade linux-riscvUpgrade linux-gkeUpgrade linux-azure-fipsUpgrade linux-azure-5.15Upgrade linux-oracleUpgrade linux-gke-5.15Upgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-aws-5.4Upgrade linux-realtimeUpgrade linux-fipsUpgrade linux-gkeopUpgrade linux-intel-iotg | Nov 19, 2024 | Oct 20, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Oct 20, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub