In the Linux kernel, the following vulnerability has been resolved:
net: USB: Fix wrong-direction WARNING in plusb.c
The syzbot fuzzer detected a bug in the plusb network driver: A zero-length control-OUT transfer was treated as a read instead of a write. In modern kernels this error provokes a WARNING:
usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 WARNING: CPU: 0 PID: 4645 at drivers/usb/core/urb.c:411 usb_submit_urb+0x14a7/0x1880 drivers/usb/core/urb.c:411 Modules linked in: CPU: 1 PID: 4645 Comm: dhcpcd Not tainted 6.2.0-rc6-syzkaller-00050-g9f266ccaa2f5 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 RIP: 0010:usb_submit_urb+0x14a7/0x1880 drivers/usb/core/urb.c:411 ... Call Trace: <TASK> usb_start_wait_urb+0x101/0x4b0 drivers/usb/core/message.c:58 usb_internal_control_msg drivers/usb/core/message.c:102 [inline] usb_control_msg+0x320/0x4a0 drivers/usb/core/message.c:153 __usbnet_read_cmd+0xb9/0x390 drivers/net/usb/usbnet.c:2010 usbnet_read_cmd+0x96/0xf0 drivers/net/usb/usbnet.c:2068 pl_vendor_req drivers/net/usb/plusb.c:60 [inline] pl_set_QuickLink_features drivers/net/usb/plusb.c:75 [inline] pl_reset+0x2f/0xf0 drivers/net/usb/plusb.c:85 usbnet_open+0xcc/0x5d0 drivers/net/usb/usbnet.c:889 __dev_open+0x297/0x4d0 net/core/dev.c:1417 __dev_change_flags+0x587/0x750 net/core/dev.c:8530 dev_change_flags+0x97/0x170 net/core/dev.c:8602 devinet_ioctl+0x15a2/0x1d70 net/ipv4/devinet.c:1147 inet_ioctl+0x33f/0x380 net/ipv4/af_inet.c:979 sock_do_ioctl+0xcc/0x230 net/socket.c:1169 sock_ioctl+0x1f8/0x680 net/socket.c:1286 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x197/0x210 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd
The fix is to call usbnet_write_cmd() instead of usbnet_read_cmd() and remove the USB_DIR_IN flag.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade python-perfUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.309-231.529Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfo | May 21, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Nov 5, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jan 15, 2025 | May 21, 2024 |
| Suse | — | Upgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade dtb-armUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade dtb-rockchipUpgrade kernel-docsUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-rt-extraUpgrade kernel-rt_debugUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade kernel-azureUpgrade kernel-azure-extraUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade dtb-lgUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade dtb-appleUpgrade kernel-sourceUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-develUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-azure | Jun 12, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-realtimeUpgrade linux-intel-iotg-5.15Upgrade linux-raspi-5.4Upgrade linux-fipsUpgrade linux-hweUpgrade linux-intel-iot-realtimeUpgrade linux-azure-4.15Upgrade linux-gcp-4.15Upgrade linux-gcpUpgrade linux-riscv-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-gcp-5.15Upgrade linux-kvmUpgrade linux-awsUpgrade linux-bluefieldUpgrade linux-intel-iotgUpgrade linux-azure-fdeUpgrade linux-azure-5.4Upgrade linux-aws-5.15Upgrade linux-gcp-fipsUpgrade linux-oracle-5.4Upgrade linux-hwe-5.15Upgrade linux-iotUpgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux-oracle-5.15Upgrade linux-ibmUpgrade linux-gkeop-5.15Upgrade linux-nvidiaUpgrade linux-ibm-5.4Upgrade linux-azure-5.15Upgrade linuxUpgrade linux-azureUpgrade linux-xilinx-zynqmpUpgrade linux-raspiUpgrade linux-lowlatencyUpgrade linux-aws-5.4Upgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-gke | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub