The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
Syzbot reported an slab-out-of-bounds Read in thrustmaster_probe() bug. The root case is in missing validation check of actual number of endpoints.
Code should not blindly access usb_host_interface::endpoint array, since it may contain less endpoints than code expects.
Fix it by adding missing validaion check and print an error if number of endpoints do not match expected number
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-docUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-core | Sep 26, 2024 | Jul 16, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 16, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | Jul 16, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-debug-develUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade bpftool | Oct 2, 2024 | Jul 16, 2024 |
| Ubuntu | — | Upgrade linux-realtimeUpgrade linux-intel-iotg-5.15 | Nov 19, 2024 | Jul 16, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub