In the Linux kernel, the following vulnerability has been resolved:
char: xillybus: Check USB endpoints when probing device
Ensure, as the driver probes the device, that all endpoints that the driver may attempt to access exist and are of the correct type.
All XillyUSB devices must have a Bulk IN and Bulk OUT endpoint at address 1. This is verified in xillyusb_setup_base_eps().
On top of that, a XillyUSB device may have additional Bulk OUT endpoints. The information about these endpoints' addresses is deduced from a data structure (the IDT) that the driver fetches from the device while probing it. These endpoints are checked in setup_channels().
A XillyUSB device never has more than one IN endpoint, as all data towards the host is multiplexed in this single Bulk IN endpoint. This is why setup_channels() only checks OUT endpoints.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 11, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Sep 11, 2024 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade kernel-default-extraUpgrade ocfs2-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade kernel-azure-optionalUpgrade kernel-rt_debugUpgrade kernel-syms-azureUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade dtb-appleUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade kernel-source-azureUpgrade dtb-amlogicUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debugUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade dtb-caviumUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade dtb-lgUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-azureUpgrade dlm-kmp-azureUpgrade dtb-sprdUpgrade kernel-azure-develUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatchUpgrade kernel-64kb-extraUpgrade dlm-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kselftests-kmp-default | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-intelUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpae | Nov 12, 2024 | Sep 11, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Sep 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub