In the Linux kernel, the following vulnerability has been resolved:
comedi: vmk80xx: fix incomplete endpoint checking
While vmk80xx does have endpoint checking implemented, some things can fall through the cracks. Depending on the hardware model, URBs can have either bulk or interrupt type, and current version of vmk80xx_find_usb_endpoints() function does not take that fully into account. While this warning does not seem to be too harmful, at the very least it will crash systems with 'panic_on_warn' set on them.
Fix the issue found by Syzkaller [1] by somewhat simplifying the endpoint checking process with usb_find_common_endpoints() and ensuring that only expected endpoint types are present.
This patch has not been tested on real hardware.
[1] Syzkaller report: usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 0 PID: 781 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc4e/0x18c0 drivers/usb/core/urb.c:503 ... Call Trace: <TASK> usb_start_wait_urb+0x113/0x520 drivers/usb/core/message.c:59 vmk80xx_reset_device drivers/comedi/drivers/vmk80xx.c:227 [inline] vmk80xx_auto_attach+0xa1c/0x1a40 drivers/comedi/drivers/vmk80xx.c:818 comedi_auto_config+0x238/0x380 drivers/comedi/drivers.c:1067 usb_probe_interface+0x5cd/0xb00 drivers/usb/core/driver.c:399 ...
Similar issue also found by Syzkaller:
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade dtb-amdUpgrade kernel-syms-rtUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade dtb-renesasUpgrade kernel-azureUpgrade dtb-appleUpgrade kernel-rt-extraUpgrade dtb-lgUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade kernel-debug-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-amazonUpgrade dtb-exynosUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-sourceUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-macrosUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-syms-azureUpgrade kernel-defaultUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dtb-apmUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade kernel-default-optional | Jun 13, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-awsUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-bluefieldUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop | Jul 12, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub