In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
Userspace provided string 's' could trivially have the length zero. Left unchecked this will firstly result in an OOB read in the form `if (str[0 - 1] == '\n') followed closely by an OOB write in the form `str[0 - 1] = '\0'`.
There is already a validating check to catch strings that are too long. Let's supply an additional check for invalid strings that are too short.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 14, 2024 | Aug 7, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Aug 7, 2024 |
| Suse | — | Upgrade dtb-armUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade kernel-default-extraUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kernel-default-develUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade kernel-develUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kbUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade kernel-syms-azureUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-develUpgrade dtb-amlogicUpgrade kernel-default-manUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade dtb-caviumUpgrade kernel-rtUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-defaultUpgrade kernel-azure-optionalUpgrade kernel-azure-baseUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dtb-exynosUpgrade dtb-appleUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-devel | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-oem-osp1Upgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-intelUpgrade linux-image-raspi2Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1132-awsUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1043-iotUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-5.4.0-1137-azureUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-bluefieldUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-22.04 | Sep 13, 2024 | Aug 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub