In the Linux kernel, the following vulnerability has been resolved:
usb: atm: cxacru: fix endpoint checking in cxacru_bind()
Syzbot is still reporting quite an old issue [1] that occurs due to incomplete checking of present usb endpoints. As such, wrong endpoints types may be used at urb sumbitting stage which in turn triggers a warning in usb_submit_urb().
Fix the issue by verifying that required endpoint types are present for both in and out endpoints, taking into account cmd endpoint type.
Unfortunately, this patch has not been tested on real hardware.
[1] Syzbot report: usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 0 PID: 8667 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 drivers/usb/core/urb.c:502 Modules linked in: CPU: 0 PID: 8667 Comm: kworker/0:4 Not tainted 5.14.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: usb_hub_wq hub_event RIP: 0010:usb_submit_urb+0xed2/0x18a0 drivers/usb/core/urb.c:502 ... Call Trace: cxacru_cm+0x3c0/0x8e0 drivers/usb/atm/cxacru.c:649 cxacru_card_status+0x22/0xd0 drivers/usb/atm/cxacru.c:760 cxacru_bind+0x7ac/0x11a0 drivers/usb/atm/cxacru.c:1209 usbatm_usb_probe+0x321/0x1ae0 drivers/usb/atm/usbatm.c:1055 cxacru_usb_probe+0xdf/0x1e0 drivers/usb/atm/cxacru.c:1363 usb_probe_interface+0x315/0x7f0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:517 [inline] really_probe+0x23c/0xcd0 drivers/base/dd.c:595 __driver_probe_device+0x338/0x4d0 drivers/base/dd.c:747 driver_probe_device+0x4c/0x1a0 drivers/base/dd.c:777 __device_attach_driver+0x20b/0x2f0 drivers/base/dd.c:894 bus_for_each_drv+0x15f/0x1e0 drivers/base/bus.c:427 __device_attach+0x228/0x4a0 drivers/base/dd.c:965 bus_probe_device+0x1e4/0x290 drivers/base/bus.c:487 device_add+0xc2f/0x2180 drivers/base/core.c:3354 usb_set_configuration+0x113a/0x1910 drivers/usb/core/message.c:2170 usb_generic_driver_probe+0xba/0x100 drivers/usb/core/generic.c:238 usb_probe_device+0xd9/0x2c0 drivers/usb/core/driver.c:293
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-rt-modules | Sep 26, 2024 | Jul 29, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.223-211.872Upgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.352-267.564Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-headers | Dec 12, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Aug 7, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Nov 5, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-headers | Oct 2, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade dtb-freescaleUpgrade kernel-obs-qaUpgrade kernel-rt-vdsoUpgrade dtb-alteraUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade dtb-broadcomUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-default-manUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade kernel-rt-develUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade kernel-azure-baseUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-debugUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-rt-livepatch | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-4.4.0-260-lowlatencyUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-azureUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-gkeop-5.4Upgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-4.15.0-230-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-azure-lts-18.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-4.15.0-230-genericUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-4.4.0-1138-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-4.15.0-1136-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-4.4.0-1137-awsUpgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-18.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-oemUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-4.15.0-1157-kvmUpgrade linux-image-4.4.0-1175-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-4.15.0-1167-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-4.15.0-1174-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-4.15.0-1182-azureUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-4.4.0-260-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-aws-hweUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1137-azureUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04a | Sep 13, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub