In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
Syzbot points out that skb_trim() has a sanity check on the existing length of the skb, which can be uninitialised in some error paths. The intent here is clearly just to reset the length to zero before resubmitting, so switch to calling __skb_set_length(skb, 0) directly. In addition, __skb_set_length() already contains a call to skb_reset_tail_pointer(), so remove the redundant call.
The syzbot report came from ath9k_hif_usb_reg_in_cb(), but there's a similar usage of skb_trim() in ath9k_hif_usb_rx_cb(), change both while we're at it.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-2092-gcp-fipsUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-awsUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-azure-4.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-4.4.0-280-genericUpgrade linux-image-4.4.0-1155-kvmUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-azure-nvidiaUpgrade linux-image-4.15.0-249-genericUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fips-4.15Upgrade linux-image-4.15.0-2129-aws-fipsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-4.15.0-1184-gcpUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-4.4.0-1154-awsUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-azureUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-raspi2Upgrade linux-image-ibm-classicUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-208-genericUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-4.15.0-1146-fipsUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1200-azureUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-4.15.0-1153-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-4.4.0-280-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oem-24.04Upgrade linux-image-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-hweUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-bluefieldUpgrade linux-image-gcp-4.15Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-4.15.0-249-lowlatencyUpgrade linux-image-4.15.0-2109-azure-fipsUpgrade linux-image-4.4.0-1192-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-4.15Upgrade linux-image-aws-fipsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oemUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-aws-4.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-4.15.0-1191-awsUpgrade linux-image-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1023-awsUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1142-aws | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub