In the Linux kernel, the following vulnerability has been resolved:
net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
syzbot reported that act_len in kalmia_send_init_packet() is uninitialized when passing it to the first usb_bulk_msg error path. Jiri Pirko noted that it's pointless to pass it in the error path, and that the value that would be printed in the second error path would be the value of act_len from the first call to usb_bulk_msg.[1]
With this in mind, let's just not pass act_len to the usb_bulk_msg error paths.
1: https://lore.kernel.org/lkml/Y9pY61y1nwTuzMOa@nanopsycho/
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade perfUpgrade kernel-docUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-modules | Jul 3, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.309-231.529Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.173-154.642Upgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perfUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 3, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 3, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernelUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-libs-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-devel | Jul 16, 2024 | May 21, 2024 |
| Suse | — | Upgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-rt-livepatchUpgrade kernel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-xilinxUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade dtb-mediatekUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade gfs2-kmp-azureUpgrade kernel-macrosUpgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-default-manUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-develUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade kernel-syms-rtUpgrade kselftests-kmp-azureUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-default-develUpgrade kernel-defaultUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-baseUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-default | Jun 12, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-intel-iotgUpgrade linux-intel-iot-realtimeUpgrade linux-nvidiaUpgrade linux-kvmUpgrade linux-aws-hweUpgrade linux-oracle-5.4Upgrade linux-gkeUpgrade linux-oracle-5.15Upgrade linux-realtimeUpgrade linux-riscv-5.15Upgrade linux-gcp-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-azure-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-fipsUpgrade linux-raspi-5.4Upgrade linux-oracleUpgrade linux-gkeopUpgrade linux-gcp-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gcpUpgrade linux-raspiUpgrade linux-lowlatencyUpgrade linux-ibm-5.4Upgrade linux-gcp-fipsUpgrade linuxUpgrade linux-ibmUpgrade linux-hwe-5.15Upgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-gkeop-5.15Upgrade linux-iotUpgrade linux-hwe-5.4Upgrade linux-gcp-4.15Upgrade linux-intel-iotg-5.15Upgrade linux-hweUpgrade linux-azureUpgrade linux-aws-5.15Upgrade linux-azure-5.4Upgrade linux-awsUpgrade linux-aws-5.4Upgrade linux-azure-4.15Upgrade linux-azure-fde | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub