In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: aspeed_udc: validate endpoint index for ast udc
We should verify the bound of the array to assure that host may not manipulate the index to point past endpoint array.
Found by static analysis.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 27, 2024 |
| Suse | — | Upgrade kernel-rtUpgrade dtb-alteraUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-default-livepatchUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade dtb-marvellUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade dlm-kmp-64kbUpgrade dtb-appleUpgrade dtb-lgUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade kernel-syms-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade dtb-armUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-amdUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade dtb-caviumUpgrade kernel-develUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-rt-devel | Dec 5, 2025 | Nov 13, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-24.04aUpgrade linux-image-virtualUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-awsUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1020-aws | Dec 13, 2024 | Sep 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Sep 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub