In the Linux kernel, the following vulnerability has been resolved:
wifi: carl9170: add a proper sanity check for endpoints
Syzkaller reports [1] hitting a warning which is caused by presence of a wrong endpoint type at the URB sumbitting stage. While there was a check for a specific 4th endpoint, since it can switch types between bulk and interrupt, other endpoints are trusted implicitly. Similar warning is triggered in a couple of other syzbot issues [2].
Fix the issue by doing a comprehensive check of all endpoints taking into account difference between high- and full-speed configuration.
[1] Syzkaller report: ... WARNING: CPU: 0 PID: 4721 at drivers/usb/core/urb.c:504 usb_submit_urb+0xed6/0x1880 drivers/usb/core/urb.c:504 ... Call Trace: <TASK> carl9170_usb_send_rx_irq_urb+0x273/0x340 drivers/net/wireless/ath/carl9170/usb.c:504 carl9170_usb_init_device drivers/net/wireless/ath/carl9170/usb.c:939 [inline] carl9170_usb_firmware_finish drivers/net/wireless/ath/carl9170/usb.c:999 [inline] carl9170_usb_firmware_step2+0x175/0x240 drivers/net/wireless/ath/carl9170/usb.c:1028 request_firmware_work_func+0x130/0x240 drivers/base/firmware_loader/main.c:1107 process_one_work+0x9bf/0x1710 kernel/workqueue.c:2289 worker_thread+0x669/0x1090 kernel/workqueue.c:2436 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 </TASK>
[2] Related syzkaller crashes:
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade dtb-armUpgrade kernel-rt-livepatchUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-azure-extraUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-default-vdsoUpgrade dtb-appleUpgrade dtb-sprdUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-amazonUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-azure-optionalUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-rt_debug-develUpgrade dlm-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-default-base-rebuildUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-azure-base | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-azureUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-4.15.0-1178-awsUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-nvidiaUpgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-intelUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-235-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.4.0-1141-awsUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oemUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-kvmUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1186-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-aws | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub