In the Linux kernel, the following vulnerability has been resolved:
comedi: vmk80xx: fix incomplete endpoint checking
While vmk80xx does have endpoint checking implemented, some things can fall through the cracks. Depending on the hardware model, URBs can have either bulk or interrupt type, and current version of vmk80xx_find_usb_endpoints() function does not take that fully into account. While this warning does not seem to be too harmful, at the very least it will crash systems with 'panic_on_warn' set on them.
Fix the issue found by Syzkaller [1] by somewhat simplifying the endpoint checking process with usb_find_common_endpoints() and ensuring that only expected endpoint types are present.
This patch has not been tested on real hardware.
[1] Syzkaller report: usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 0 PID: 781 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc4e/0x18c0 drivers/usb/core/urb.c:503 ... Call Trace: <TASK> usb_start_wait_urb+0x113/0x520 drivers/usb/core/message.c:59 vmk80xx_reset_device drivers/comedi/drivers/vmk80xx.c:227 [inline] vmk80xx_auto_attach+0xa1c/0x1a40 drivers/comedi/drivers/vmk80xx.c:818 comedi_auto_config+0x238/0x380 drivers/comedi/drivers.c:1067 usb_probe_interface+0x5cd/0xb00 drivers/usb/core/driver.c:399 ...
Similar issue also found by Syzkaller:
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade dtb-socionextUpgrade kernel-azureUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kernel-devel-azureUpgrade gfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade kernel-syms-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-amazonUpgrade dtb-exynosUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade kernel-sourceUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-azure-extraUpgrade dtb-amlogicUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-rtUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-rt | Jun 13, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-intelUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1011-awsUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-genericUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-oracleUpgrade linux-image-oem-20.04b | Jul 12, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub