In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
Userspace provided string 's' could trivially have the length zero. Left unchecked this will firstly result in an OOB read in the form `if (str[0 - 1] == '\n') followed closely by an OOB write in the form `str[0 - 1] = '\0'`.
There is already a validating check to catch strings that are too long. Let's supply an additional check for invalid strings that are too short.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 14, 2024 | Aug 7, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Aug 7, 2024 |
| Suse | — | Upgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade dtb-socionextUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade dtb-amazonUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-default-optionalUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade kernel-64kbUpgrade kernel-rt-livepatchUpgrade kernel-docsUpgrade dtb-amlogicUpgrade kernel-default-manUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-debug-develUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade dtb-mediatekUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-defaultUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade dtb-appleUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade dtb-marvell | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1137-azureUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-genericUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oemUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.4.0-1043-iotUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-azureUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-gcpUpgrade linux-image-intelUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-195-genericUpgrade linux-image-kvmUpgrade linux-image-oracle-lts-22.04 | Sep 13, 2024 | Aug 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub