In the Linux kernel, the following vulnerability has been resolved:
usb: atm: cxacru: fix endpoint checking in cxacru_bind()
Syzbot is still reporting quite an old issue [1] that occurs due to incomplete checking of present usb endpoints. As such, wrong endpoints types may be used at urb sumbitting stage which in turn triggers a warning in usb_submit_urb().
Fix the issue by verifying that required endpoint types are present for both in and out endpoints, taking into account cmd endpoint type.
Unfortunately, this patch has not been tested on real hardware.
[1] Syzbot report: usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 0 PID: 8667 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 drivers/usb/core/urb.c:502 Modules linked in: CPU: 0 PID: 8667 Comm: kworker/0:4 Not tainted 5.14.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: usb_hub_wq hub_event RIP: 0010:usb_submit_urb+0xed2/0x18a0 drivers/usb/core/urb.c:502 ... Call Trace: cxacru_cm+0x3c0/0x8e0 drivers/usb/atm/cxacru.c:649 cxacru_card_status+0x22/0xd0 drivers/usb/atm/cxacru.c:760 cxacru_bind+0x7ac/0x11a0 drivers/usb/atm/cxacru.c:1209 usbatm_usb_probe+0x321/0x1ae0 drivers/usb/atm/usbatm.c:1055 cxacru_usb_probe+0xdf/0x1e0 drivers/usb/atm/cxacru.c:1363 usb_probe_interface+0x315/0x7f0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:517 [inline] really_probe+0x23c/0xcd0 drivers/base/dd.c:595 __driver_probe_device+0x338/0x4d0 drivers/base/dd.c:747 driver_probe_device+0x4c/0x1a0 drivers/base/dd.c:777 __device_attach_driver+0x20b/0x2f0 drivers/base/dd.c:894 bus_for_each_drv+0x15f/0x1e0 drivers/base/bus.c:427 __device_attach+0x228/0x4a0 drivers/base/dd.c:965 bus_probe_device+0x1e4/0x290 drivers/base/bus.c:487 device_add+0xc2f/0x2180 drivers/base/core.c:3354 usb_set_configuration+0x113a/0x1910 drivers/usb/core/message.c:2170 usb_generic_driver_probe+0xba/0x100 drivers/usb/core/generic.c:238 usb_probe_device+0xd9/0x2c0 drivers/usb/core/driver.c:293
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-rt-develUpgrade perf | Sep 26, 2024 | Jul 29, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.223-211.872Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.352-267.564 | Dec 12, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 7, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Nov 5, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-coreUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug | Oct 2, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade dtb-renesasUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade dtb-armUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-rt-optionalUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade kernel-docsUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade kernel-default-optionalUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-amdUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-rockchipUpgrade kernel-devel-rtUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-source-rtUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade kernel-azure-baseUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade dtb-lgUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-amazonUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-default-man | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1043-iotUpgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-gkeop-5.4Upgrade linux-image-azureUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-4.4.0-260-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-4.15.0-1136-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-195-genericUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-230-genericUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-4.4.0-1138-kvmUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-4.15.0-230-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-4.4.0-1137-awsUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-lts-18.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-4.15.0-1157-kvmUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-raspi2Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-4.4.0-1175-awsUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-ibmUpgrade linux-image-4.15.0-1182-azureUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-4.15.0-1174-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-260-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-kvmUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-awsUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-4.15.0-1167-gcpUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-aws-hweUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-virtualUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1137-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1132-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-24.04 | Sep 13, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub