In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
Userspace provided string 's' could trivially have the length zero. Left unchecked this will firstly result in an OOB read in the form `if (str[0 - 1] == '\n') followed closely by an OOB write in the form `str[0 - 1] = '\0'`.
There is already a validating check to catch strings that are too long. Let's supply an additional check for invalid strings that are too short.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 14, 2024 | Aug 7, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Aug 7, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade dtb-freescaleUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kernel-rtUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-appleUpgrade dtb-exynosUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade kernel-rt-optionalUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade kernel-default-manUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade kernel-debug-develUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade kernel-syms-azureUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade dtb-armUpgrade kernel-debugUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-default-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade kernel-devel-azureUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade kernel-source | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-genericUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-virtualUpgrade linux-image-oem-22.04aUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-5.4.0-1137-azureUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-azure-cvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-intelUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-awsUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-18.04 | Sep 13, 2024 | Aug 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub