In the Linux kernel, the following vulnerability has been resolved:
usb: atm: cxacru: fix endpoint checking in cxacru_bind()
Syzbot is still reporting quite an old issue [1] that occurs due to incomplete checking of present usb endpoints. As such, wrong endpoints types may be used at urb sumbitting stage which in turn triggers a warning in usb_submit_urb().
Fix the issue by verifying that required endpoint types are present for both in and out endpoints, taking into account cmd endpoint type.
Unfortunately, this patch has not been tested on real hardware.
[1] Syzbot report: usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 0 PID: 8667 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 drivers/usb/core/urb.c:502 Modules linked in: CPU: 0 PID: 8667 Comm: kworker/0:4 Not tainted 5.14.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: usb_hub_wq hub_event RIP: 0010:usb_submit_urb+0xed2/0x18a0 drivers/usb/core/urb.c:502 ... Call Trace: cxacru_cm+0x3c0/0x8e0 drivers/usb/atm/cxacru.c:649 cxacru_card_status+0x22/0xd0 drivers/usb/atm/cxacru.c:760 cxacru_bind+0x7ac/0x11a0 drivers/usb/atm/cxacru.c:1209 usbatm_usb_probe+0x321/0x1ae0 drivers/usb/atm/usbatm.c:1055 cxacru_usb_probe+0xdf/0x1e0 drivers/usb/atm/cxacru.c:1363 usb_probe_interface+0x315/0x7f0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:517 [inline] really_probe+0x23c/0xcd0 drivers/base/dd.c:595 __driver_probe_device+0x338/0x4d0 drivers/base/dd.c:747 driver_probe_device+0x4c/0x1a0 drivers/base/dd.c:777 __device_attach_driver+0x20b/0x2f0 drivers/base/dd.c:894 bus_for_each_drv+0x15f/0x1e0 drivers/base/bus.c:427 __device_attach+0x228/0x4a0 drivers/base/dd.c:965 bus_probe_device+0x1e4/0x290 drivers/base/bus.c:487 device_add+0xc2f/0x2180 drivers/base/core.c:3354 usb_set_configuration+0x113a/0x1910 drivers/usb/core/message.c:2170 usb_generic_driver_probe+0xba/0x100 drivers/usb/core/generic.c:238 usb_probe_device+0xd9/0x2c0 drivers/usb/core/driver.c:293
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules | Sep 26, 2024 | Jul 29, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.352-267.564Upgrade perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.223-211.872Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool | Dec 12, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 7, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Nov 5, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade bpftoolUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libs-devel | Oct 2, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-macrosUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade dtb-amazonUpgrade dtb-lgUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-rt-vdsoUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-manUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-docs-htmlUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade dtb-allwinnerUpgrade kselftests-kmp-defaultUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade gfs2-kmp-azureUpgrade dtb-appleUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade dtb-nvidiaUpgrade kselftests-kmp-azure | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-4.15.0-230-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-4.15.0-230-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-raspiUpgrade linux-image-azure-lts-18.04Upgrade linux-image-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-intelUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-4.15.0-1136-oracleUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-ibmUpgrade linux-image-4.4.0-1137-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-4.4.0-1138-kvmUpgrade linux-image-4.4.0-260-lowlatencyUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-4.15.0-1167-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi2Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-4.4.0-1175-awsUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1132-awsUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-4.15.0-1174-awsUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-260-genericUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-gkeUpgrade linux-image-4.15.0-1182-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-bluefieldUpgrade linux-image-aws-lts-22.04Upgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-virtualUpgrade linux-image-aws-hweUpgrade linux-image-azure-cvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-22.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1137-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-1157-kvmUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-oemUpgrade linux-image-5.4.0-1116-raspi | Sep 13, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub