In the Linux kernel, the following vulnerability has been resolved:
net: USB: Fix wrong-direction WARNING in plusb.c
The syzbot fuzzer detected a bug in the plusb network driver: A zero-length control-OUT transfer was treated as a read instead of a write. In modern kernels this error provokes a WARNING:
usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 WARNING: CPU: 0 PID: 4645 at drivers/usb/core/urb.c:411 usb_submit_urb+0x14a7/0x1880 drivers/usb/core/urb.c:411 Modules linked in: CPU: 1 PID: 4645 Comm: dhcpcd Not tainted 6.2.0-rc6-syzkaller-00050-g9f266ccaa2f5 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 RIP: 0010:usb_submit_urb+0x14a7/0x1880 drivers/usb/core/urb.c:411 ... Call Trace: <TASK> usb_start_wait_urb+0x101/0x4b0 drivers/usb/core/message.c:58 usb_internal_control_msg drivers/usb/core/message.c:102 [inline] usb_control_msg+0x320/0x4a0 drivers/usb/core/message.c:153 __usbnet_read_cmd+0xb9/0x390 drivers/net/usb/usbnet.c:2010 usbnet_read_cmd+0x96/0xf0 drivers/net/usb/usbnet.c:2068 pl_vendor_req drivers/net/usb/plusb.c:60 [inline] pl_set_QuickLink_features drivers/net/usb/plusb.c:75 [inline] pl_reset+0x2f/0xf0 drivers/net/usb/plusb.c:85 usbnet_open+0xcc/0x5d0 drivers/net/usb/usbnet.c:889 __dev_open+0x297/0x4d0 net/core/dev.c:1417 __dev_change_flags+0x587/0x750 net/core/dev.c:8530 dev_change_flags+0x97/0x170 net/core/dev.c:8602 devinet_ioctl+0x15a2/0x1d70 net/ipv4/devinet.c:1147 inet_ioctl+0x33f/0x380 net/ipv4/af_inet.c:979 sock_do_ioctl+0xcc/0x230 net/socket.c:1169 sock_ioctl+0x1f8/0x680 net/socket.c:1286 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x197/0x210 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd
The fix is to call usbnet_write_cmd() instead of usbnet_read_cmd() and remove the USB_DIR_IN flag.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade bpftoolUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.309-231.529Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel | May 21, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Nov 5, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Jan 15, 2025 | May 21, 2024 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-default-base-rebuildUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade dtb-rockchipUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade kernel-docsUpgrade dtb-socionextUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade dtb-xilinxUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade kernel-develUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-source-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade dtb-qcomUpgrade ocfs2-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-rt-optionalUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade kernel-azure-baseUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade dtb-lgUpgrade dtb-amdUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdso | Jun 12, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-gkeUpgrade linux-nvidiaUpgrade linux-iotUpgrade linux-gkeop-5.15Upgrade linux-oracle-5.15Upgrade linux-azure-5.15Upgrade linux-azureUpgrade linux-hwe-5.4Upgrade linux-hwe-5.15Upgrade linux-aws-hweUpgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-aws-5.4Upgrade linuxUpgrade linux-oracle-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-lowlatencyUpgrade linux-ibm-5.4Upgrade linux-gkeopUpgrade linux-raspiUpgrade linux-intel-iotgUpgrade linux-intel-iotg-5.15Upgrade linux-awsUpgrade linux-gcp-5.15Upgrade linux-bluefieldUpgrade linux-aws-5.15Upgrade linux-azure-fdeUpgrade linux-gcp-4.15Upgrade linux-realtimeUpgrade linux-azure-4.15Upgrade linux-azure-5.4Upgrade linux-fipsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-kvmUpgrade linux-gcp-fipsUpgrade linux-nvidia-tegra-5.15Upgrade linux-gcpUpgrade linux-intel-iot-realtimeUpgrade linux-riscv-5.15Upgrade linux-hweUpgrade linux-raspi-5.4 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub