In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: aspeed_udc: validate endpoint index for ast udc
We should verify the bound of the array to assure that host may not manipulate the index to point past endpoint array.
Found by static analysis.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 27, 2024 |
| Suse | — | Upgrade kernel-devel-rtUpgrade kernel-defaultUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-baseUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-develUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade dtb-renesasUpgrade dtb-amdUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-hisiliconUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-armUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade kselftests-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade dtb-sprdUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-64kb | Dec 5, 2025 | Nov 13, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-raspiUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtualUpgrade linux-image-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-lowlatency | Dec 13, 2024 | Sep 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Sep 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub