In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
Userspace provided string 's' could trivially have the length zero. Left unchecked this will firstly result in an OOB read in the form `if (str[0 - 1] == '\n') followed closely by an OOB write in the form `str[0 - 1] = '\0'`.
There is already a validating check to catch strings that are too long. Let's supply an additional check for invalid strings that are too short.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Aug 14, 2024 | Aug 7, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Aug 7, 2024 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade kernel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade dtb-exynosUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade dtb-qcomUpgrade dtb-appleUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade kernel-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-rockchipUpgrade kernel-azure-baseUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-default-manUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade kernel-default-optionalUpgrade kernel-azure-vdsoUpgrade kernel-64kb-develUpgrade kernel-rt-livepatch-develUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qa | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-intelUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-awsUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-genericUpgrade linux-image-bluefieldUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1137-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-6.8.0-1002-gkeop | Sep 13, 2024 | Aug 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub