In the Linux kernel, the following vulnerability has been resolved:
char: xillybus: Check USB endpoints when probing device
Ensure, as the driver probes the device, that all endpoints that the driver may attempt to access exist and are of the correct type.
All XillyUSB devices must have a Bulk IN and Bulk OUT endpoint at address 1. This is verified in xillyusb_setup_base_eps().
On top of that, a XillyUSB device may have additional Bulk OUT endpoints. The information about these endpoints' addresses is deduced from a data structure (the IDT) that the driver fetches from the device while probing it. These endpoints are checked in setup_channels().
A XillyUSB device never has more than one IN endpoint, as all data towards the host is multiplexed in this single Bulk IN endpoint. This is why setup_channels() only checks OUT endpoints.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 11, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Sep 11, 2024 |
| Suse | — | Upgrade kernel-azure-livepatch-develUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-default-base-rebuildUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kernel-rt-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rtUpgrade kernel-azureUpgrade dtb-mediatekUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade dtb-caviumUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade kernel-macrosUpgrade kernel-debugUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kernel-syms-azureUpgrade dtb-marvellUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade ocfs2-kmp-rt | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-intelUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-5.15.0-1067-intel-iotg | Nov 12, 2024 | Sep 11, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Sep 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub