In the Linux kernel, the following vulnerability has been resolved:
media: imon: fix access to invalid resource for the second interface
imon driver probes two USB interfaces, and at the probe of the second interface, the driver assumes blindly that the first interface got bound with the same imon driver. It's usually true, but it's still possible that the first interface is bound with another driver via a malformed descriptor. Then it may lead to a memory corruption, as spotted by syzkaller; imon driver accesses the data from drvdata as struct imon_context object although it's a completely different one that was assigned by another driver.
This patch adds a sanity check -- whether the first interface is really bound with the imon driver or not -- for avoiding the problem above at the probe time.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 9, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Oct 9, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade kernel-azureUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-azure-develUpgrade dtb-sprdUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-default-manUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade kernel-azure-vdsoUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade kernel-rt-develUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade dtb-xilinxUpgrade dlm-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-appleUpgrade kernel-default-vdsoUpgrade dtb-apmUpgrade dtb-allwinnerUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-sourceUpgrade kernel-source-azure | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeop-5.15Upgrade linux-nvidia-6.5Upgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegra-igxUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-fipsUpgrade linux-bluefieldUpgrade linux-awsUpgrade linux-gcpUpgrade linux-aws-fipsUpgrade linux-fipsUpgrade linux-azure-fde-5.15Upgrade linux-azure-fdeUpgrade linux-riscv-5.15Upgrade linux-azureUpgrade linux-gcp-5.15Upgrade linuxUpgrade linux-xilinx-zynqmpUpgrade linux-azure-5.15Upgrade linux-intel-iotgUpgrade linux-ibm-5.15Upgrade linux-nvidia-tegraUpgrade linux-ibmUpgrade linux-raspiUpgrade linux-oracleUpgrade linux-nvidia-tegra-5.15Upgrade linux-aws-5.15Upgrade linux-kvmUpgrade linux-lowlatencyUpgrade linux-nvidiaUpgrade linux-oracle-5.15Upgrade linux-hwe-5.15Upgrade linux-gkeUpgrade linux-gkeop | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub