In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: uvc: Prevent buffer overflow in setup handler
Setup function uvc_function_setup permits control transfer requests with up to 64 bytes of payload (UVC_MAX_REQUEST_SIZE), data stage handler for OUT transfer uses memcpy to copy req->actual bytes to uvc_event->data.data array of size 60. This may result in an overflow of 4 bytes.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 23, 2024 | Oct 23, 2024 |
| Ubuntu | — | Upgrade linux-ibmUpgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux-ibm-5.4Upgrade linux-azure-fipsUpgrade linuxUpgrade linux-xilinx-zynqmpUpgrade linux-gcp-4.15Upgrade linux-aws-fipsUpgrade linux-gcp-fipsUpgrade linux-nvidiaUpgrade linux-intel-iot-realtimeUpgrade linux-lowlatencyUpgrade linux-hweUpgrade linux-oracleUpgrade linux-azure-5.15Upgrade linux-iotUpgrade linux-oracle-5.15Upgrade linux-aws-hweUpgrade linux-hwe-5.4Upgrade linux-raspiUpgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-riscv-5.15Upgrade linux-azure-4.15Upgrade linux-intel-iotg-5.15Upgrade linux-intel-iotgUpgrade linux-azureUpgrade linux-nvidia-tegra-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-oracle-5.4Upgrade linux-gcp-5.15Upgrade linux-awsUpgrade linux-kvmUpgrade linux-azure-fdeUpgrade linux-gcpUpgrade linux-fipsUpgrade linux-realtimeUpgrade linux-hwe-5.15Upgrade linux-gkeUpgrade linux-aws-5.4Upgrade linux-aws-5.15Upgrade linux-raspi-5.4Upgrade linux-gkeop-5.15 | Nov 19, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub