In the Linux kernel, the following vulnerability has been resolved:
net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
syzbot reported that act_len in kalmia_send_init_packet() is uninitialized when passing it to the first usb_bulk_msg error path. Jiri Pirko noted that it's pointless to pass it in the error path, and that the value that would be printed in the second error path would be the value of act_len from the first call to usb_bulk_msg.[1]
With this in mind, let's just not pass act_len to the usb_bulk_msg error paths.
1: https://lore.kernel.org/lkml/Y9pY61y1nwTuzMOa@nanopsycho/
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade perfUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-docUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extra | Jul 3, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.173-154.642Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.309-231.529 | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 3, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 3, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade perfUpgrade kernel-rtUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules | Jul 16, 2024 | May 21, 2024 |
| Suse | — | Upgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-azure-livepatch-develUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade dtb-qcomUpgrade kernel-azureUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade dtb-lgUpgrade kernel-default-base-rebuildUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kernel-rt-livepatchUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade dtb-armUpgrade dtb-amlogicUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-64kb-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-azure-baseUpgrade dtb-allwinnerUpgrade kselftests-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade dtb-amdUpgrade dtb-amazonUpgrade dtb-renesasUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-debugUpgrade dtb-appleUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-default-man | Jun 12, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-aws-5.4Upgrade linux-awsUpgrade linux-azure-fipsUpgrade linuxUpgrade linux-ibmUpgrade linux-lowlatencyUpgrade linux-gcp-fipsUpgrade linux-hwe-5.15Upgrade linux-azureUpgrade linux-hweUpgrade linux-aws-5.15Upgrade linux-azure-5.4Upgrade linux-aws-fipsUpgrade linux-azure-4.15Upgrade linux-hwe-5.4Upgrade linux-gkeop-5.15Upgrade linux-azure-fdeUpgrade linux-gcp-4.15Upgrade linux-iotUpgrade linux-ibm-5.4Upgrade linux-raspiUpgrade linux-intel-iotg-5.15Upgrade linux-kvmUpgrade linux-intel-iot-realtimeUpgrade linux-oracleUpgrade linux-intel-iotgUpgrade linux-gcp-5.15Upgrade linux-oracle-5.15Upgrade linux-bluefieldUpgrade linux-gcp-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linux-nvidiaUpgrade linux-azure-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-riscv-5.15Upgrade linux-gkeopUpgrade linux-fipsUpgrade linux-aws-hweUpgrade linux-lowlatency-hwe-5.15Upgrade linux-realtimeUpgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-gkeUpgrade linux-raspi-5.4 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub