In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: aspeed_udc: validate endpoint index for ast udc
We should verify the bound of the array to assure that host may not manipulate the index to point past endpoint array.
Found by static analysis.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 27, 2024 |
| Suse | — | Upgrade kernel-develUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade kernel-debug-develUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade dtb-caviumUpgrade dtb-renesasUpgrade dtb-amdUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-debugUpgrade kernel-sourceUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-default-develUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade dtb-alteraUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-rtUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade kernel-64kb | Dec 5, 2025 | Nov 13, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-ibmUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-azureUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-genericUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-generic-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-raspi | Dec 13, 2024 | Sep 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Sep 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub