In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: aspeed_udc: validate endpoint index for ast udc
We should verify the bound of the array to assure that host may not manipulate the index to point past endpoint array.
Found by static analysis.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 27, 2024 |
| Suse | — | Upgrade kernel-develUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade dtb-mediatekUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade dtb-amdUpgrade dtb-xilinxUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-qcomUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade dtb-apmUpgrade kernel-default-baseUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-azureUpgrade kernel-kvmsmallUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dtb-sprdUpgrade kernel-devel-azureUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-appleUpgrade dtb-amazon | Dec 5, 2025 | Nov 13, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-awsUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04Upgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1020-aws | Dec 13, 2024 | Sep 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Sep 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub