In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
Userspace provided string 's' could trivially have the length zero. Left unchecked this will firstly result in an OOB read in the form `if (str[0 - 1] == '\n') followed closely by an OOB write in the form `str[0 - 1] = '\0'`.
There is already a validating check to catch strings that are too long. Let's supply an additional check for invalid strings that are too short.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 14, 2024 | Aug 7, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Aug 7, 2024 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade kernel-debug-develUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade kernel-sourceUpgrade dtb-xilinxUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-default-extraUpgrade dtb-amdUpgrade kernel-devel-azureUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade dtb-renesasUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-default-optionalUpgrade kselftests-kmp-rtUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-default-manUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt-livepatchUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade dtb-socionextUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dtb-exynosUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade kernel-azure-baseUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-source-azureUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-source-rtUpgrade kernel-debug-vdsoUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-lgUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-appleUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuild | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-virtualUpgrade linux-image-oem-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1137-azureUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-bluefieldUpgrade linux-image-oemUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-195-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-azure-cvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-intel | Sep 13, 2024 | Aug 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub