In the Linux kernel, the following vulnerability has been resolved:
net: USB: Fix wrong-direction WARNING in plusb.c
The syzbot fuzzer detected a bug in the plusb network driver: A zero-length control-OUT transfer was treated as a read instead of a write. In modern kernels this error provokes a WARNING:
usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 WARNING: CPU: 0 PID: 4645 at drivers/usb/core/urb.c:411 usb_submit_urb+0x14a7/0x1880 drivers/usb/core/urb.c:411 Modules linked in: CPU: 1 PID: 4645 Comm: dhcpcd Not tainted 6.2.0-rc6-syzkaller-00050-g9f266ccaa2f5 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 RIP: 0010:usb_submit_urb+0x14a7/0x1880 drivers/usb/core/urb.c:411 ... Call Trace: <TASK> usb_start_wait_urb+0x101/0x4b0 drivers/usb/core/message.c:58 usb_internal_control_msg drivers/usb/core/message.c:102 [inline] usb_control_msg+0x320/0x4a0 drivers/usb/core/message.c:153 __usbnet_read_cmd+0xb9/0x390 drivers/net/usb/usbnet.c:2010 usbnet_read_cmd+0x96/0xf0 drivers/net/usb/usbnet.c:2068 pl_vendor_req drivers/net/usb/plusb.c:60 [inline] pl_set_QuickLink_features drivers/net/usb/plusb.c:75 [inline] pl_reset+0x2f/0xf0 drivers/net/usb/plusb.c:85 usbnet_open+0xcc/0x5d0 drivers/net/usb/usbnet.c:889 __dev_open+0x297/0x4d0 net/core/dev.c:1417 __dev_change_flags+0x587/0x750 net/core/dev.c:8530 dev_change_flags+0x97/0x170 net/core/dev.c:8602 devinet_ioctl+0x15a2/0x1d70 net/ipv4/devinet.c:1147 inet_ioctl+0x33f/0x380 net/ipv4/af_inet.c:979 sock_do_ioctl+0xcc/0x230 net/socket.c:1169 sock_ioctl+0x1f8/0x680 net/socket.c:1286 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x197/0x210 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd
The fix is to call usbnet_write_cmd() instead of usbnet_read_cmd() and remove the USB_DIR_IN flag.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.309-231.529Upgrade python-perf-debuginfo | May 21, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Nov 5, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Jan 15, 2025 | May 21, 2024 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade kernel-azure-baseUpgrade dtb-marvellUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade dtb-amazonUpgrade dtb-appleUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-64kbUpgrade dtb-alteraUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-azureUpgrade kernel-azureUpgrade dtb-exynosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-obs-qaUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-rtUpgrade kernel-default-manUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade kernel-azure-livepatch-develUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-armUpgrade kernel-64kb-develUpgrade kernel-azure-vdso | Jun 12, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-azure-5.15Upgrade linux-aws-hweUpgrade linux-aws-5.4Upgrade linux-aws-fipsUpgrade linux-oracle-5.4Upgrade linux-oracle-5.15Upgrade linux-gcp-5.4Upgrade linux-nvidiaUpgrade linux-oracleUpgrade linuxUpgrade linux-xilinx-zynqmpUpgrade linux-ibm-5.4Upgrade linux-raspiUpgrade linux-hwe-5.15Upgrade linux-iotUpgrade linux-gkeUpgrade linux-lowlatencyUpgrade linux-gkeop-5.15Upgrade linux-ibmUpgrade linux-azureUpgrade linux-hwe-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-azure-fdeUpgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-aws-5.15Upgrade linux-azure-5.4Upgrade linux-gcp-4.15Upgrade linux-realtimeUpgrade linux-azure-4.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-raspi-5.4Upgrade linux-hweUpgrade linux-awsUpgrade linux-fipsUpgrade linux-kvmUpgrade linux-gcp-5.15Upgrade linux-riscv-5.15Upgrade linux-gcpUpgrade linux-intel-iotg | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub