In the Linux kernel, the following vulnerability has been resolved:
wifi: carl9170: add a proper sanity check for endpoints
Syzkaller reports [1] hitting a warning which is caused by presence of a wrong endpoint type at the URB sumbitting stage. While there was a check for a specific 4th endpoint, since it can switch types between bulk and interrupt, other endpoints are trusted implicitly. Similar warning is triggered in a couple of other syzbot issues [2].
Fix the issue by doing a comprehensive check of all endpoints taking into account difference between high- and full-speed configuration.
[1] Syzkaller report: ... WARNING: CPU: 0 PID: 4721 at drivers/usb/core/urb.c:504 usb_submit_urb+0xed6/0x1880 drivers/usb/core/urb.c:504 ... Call Trace: <TASK> carl9170_usb_send_rx_irq_urb+0x273/0x340 drivers/net/wireless/ath/carl9170/usb.c:504 carl9170_usb_init_device drivers/net/wireless/ath/carl9170/usb.c:939 [inline] carl9170_usb_firmware_finish drivers/net/wireless/ath/carl9170/usb.c:999 [inline] carl9170_usb_firmware_step2+0x175/0x240 drivers/net/wireless/ath/carl9170/usb.c:1028 request_firmware_work_func+0x130/0x240 drivers/base/firmware_loader/main.c:1107 process_one_work+0x9bf/0x1710 kernel/workqueue.c:2289 worker_thread+0x669/0x1090 kernel/workqueue.c:2436 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 </TASK>
[2] Related syzkaller crashes:
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 19, 2024 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-rt-extraUpgrade dtb-amlogicUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade kernel-azure-baseUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-apmUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade dtb-amdUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-symsUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-armUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade dtb-alteraUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade dtb-sprd | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1135-azureUpgrade linux-image-gcpUpgrade linux-image-gkeopUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-raspiUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-genericUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-1141-awsUpgrade linux-image-ibm-classicUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-intelUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-azureUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1178-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-235-genericUpgrade linux-image-virtualUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-24.04Upgrade linux-image-oemUpgrade linux-image-nvidia-64kUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1186-azureUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-bluefieldUpgrade linux-image-gkeUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.4.0-1090-bluefield | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub