In the Linux kernel, the following vulnerability has been resolved:
net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
syzbot reported that act_len in kalmia_send_init_packet() is uninitialized when passing it to the first usb_bulk_msg error path. Jiri Pirko noted that it's pointless to pass it in the error path, and that the value that would be printed in the second error path would be the value of act_len from the first call to usb_bulk_msg.[1]
With this in mind, let's just not pass act_len to the usb_bulk_msg error paths.
1: https://lore.kernel.org/lkml/Y9pY61y1nwTuzMOa@nanopsycho/
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-devel | Jul 3, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.309-231.529Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade perf | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 3, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 3, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernelUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade perfUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-rt-develUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-modules | Jul 16, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-alteraUpgrade dtb-amlogicUpgrade kernel-rt-extraUpgrade kernel-source-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade kernel-develUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade dtb-apmUpgrade kernel-azureUpgrade kernel-symsUpgrade dlm-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade dtb-amdUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-azure-baseUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-freescaleUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-manUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade kernel-debugUpgrade dtb-marvellUpgrade kernel-azure-extra | Jun 12, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-aws-5.4Upgrade linux-azure-4.15Upgrade linux-ibm-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-aws-fipsUpgrade linux-iotUpgrade linux-gcp-fipsUpgrade linuxUpgrade linux-hwe-5.15Upgrade linux-awsUpgrade linux-ibmUpgrade linux-lowlatencyUpgrade linux-hwe-5.4Upgrade linux-azure-fipsUpgrade linux-azure-fdeUpgrade linux-raspiUpgrade linux-azure-5.4Upgrade linux-gkeop-5.15Upgrade linux-aws-5.15Upgrade linux-hweUpgrade linux-azureUpgrade linux-gcp-4.15Upgrade linux-gkeUpgrade linux-oracleUpgrade linux-aws-hweUpgrade linux-azure-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-riscv-5.15Upgrade linux-gcp-5.4Upgrade linux-intel-iot-realtimeUpgrade linux-kvmUpgrade linux-realtimeUpgrade linux-fipsUpgrade linux-gcp-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-oracle-5.15Upgrade linux-gcpUpgrade linux-bluefieldUpgrade linux-nvidiaUpgrade linux-intel-iotgUpgrade linux-gkeopUpgrade linux-raspi-5.4Upgrade linux-oracle-5.4 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub