In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
Userspace provided string 's' could trivially have the length zero. Left unchecked this will firstly result in an OOB read in the form `if (str[0 - 1] == '\n') followed closely by an OOB write in the form `str[0 - 1] = '\0'`.
There is already a validating check to catch strings that are too long. Let's supply an additional check for invalid strings that are too short.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 14, 2024 | Aug 7, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Aug 7, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade dtb-broadcomUpgrade kernel-azure-baseUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade dtb-appleUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade dtb-exynosUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-default-optionalUpgrade kernel-azure-vdsoUpgrade kernel-develUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade kernel-syms-azureUpgrade kernel-docsUpgrade kernel-debug-develUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-default-manUpgrade kernel-rt-develUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-5.4.0-1137-azureUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-azure-fdeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-intelUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-azureUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-195-genericUpgrade linux-image-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-awsUpgrade linux-image-oem-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotg | Sep 13, 2024 | Aug 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub