In the Linux kernel, the following vulnerability has been resolved:
net: usb: rtl8150: enable basic endpoint checking
Syzkaller reports [1] encountering a common issue of utilizing a wrong usb endpoint type during URB submitting stage. This, in turn, triggers a warning shown below.
For now, enable simple endpoint checking (specifically, bulk and interrupt eps, testing control one is not essential) to mitigate the issue with a view to do other related cosmetic changes later, if they are necessary.
[1] Syzkaller report: usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 2586 at drivers/usb/core/urb.c:503 usb_submit_urb+0xe4b/0x1730 driv> Modules linked in: CPU: 1 UID: 0 PID: 2586 Comm: dhcpcd Not tainted 6.11.0-rc4-syzkaller-00069-gfc88bb11617> Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:usb_submit_urb+0xe4b/0x1730 drivers/usb/core/urb.c:503 Code: 84 3c 02 00 00 e8 05 e4 fc fc 4c 89 ef e8 fd 25 d7 fe 45 89 e0 89 e9 4c 89 f2 48 8> RSP: 0018:ffffc9000441f740 EFLAGS: 00010282 RAX: 0000000000000000 RBX: ffff888112487a00 RCX: ffffffff811a99a9 RDX: ffff88810df6ba80 RSI: ffffffff811a99b6 RDI: 0000000000000001 RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 R13: ffff8881023bf0a8 R14: ffff888112452a20 R15: ffff888112487a7c FS: 00007fc04eea5740(0000) GS:ffff8881f6300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0a1de9f870 CR3: 000000010dbd0000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> rtl8150_open+0x300/0xe30 drivers/net/usb/rtl8150.c:733 __dev_open+0x2d4/0x4e0 net/core/dev.c:1474 __dev_change_flags+0x561/0x720 net/core/dev.c:8838 dev_change_flags+0x8f/0x160 net/core/dev.c:8910 devinet_ioctl+0x127a/0x1f10 net/ipv4/devinet.c:1177 inet_ioctl+0x3aa/0x3f0 net/ipv4/af_inet.c:1003 sock_do_ioctl+0x116/0x280 net/socket.c:1222 sock_ioctl+0x22e/0x6c0 net/socket.c:1341 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl fs/ioctl.c:893 [inline] __x64_sys_ioctl+0x193/0x220 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc04ef73d49 ...
This change has not been tested on real hardware.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perfUpgrade kernel-tools-develUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.235-227.919Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | May 22, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Mar 17, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Jun 13, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Jun 11, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Jun 11, 2025 | Feb 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-socionextUpgrade kernel-devel-rtUpgrade dtb-armUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-default-manUpgrade dlm-kmp-defaultUpgrade kernel-devel-azureUpgrade dlm-kmp-azureUpgrade kernel-debugUpgrade kernel-macrosUpgrade dtb-qcomUpgrade kernel-docsUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-rtUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-default-develUpgrade kernel-defaultUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-amazonUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade ocfs2-kmp-azureUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade dtb-appleUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-develUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade dtb-lgUpgrade cluster-md-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-debug-devel | Apr 9, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1092-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1105-bluefieldUpgrade linux-image-5.4.0-216-genericUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1133-kvmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-azure-6.8Upgrade linux-image-5.4.0-216-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1084-awsUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-oem-24.04Upgrade linux-image-raspi2Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-5.4.0-1064-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oem-osp1Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.4.0-216-generic-lpaeUpgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.4.0-1151-azureUpgrade linux-image-virtualUpgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-gkeUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-64-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-5.4.0-1146-awsUpgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-6.8Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-5.4.0-1146-aws-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1089-azureUpgrade linux-image-5.4.0-1149-gcpUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.4.0-1144-oracleUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-5.4.0-1051-iotUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1151-azure-fipsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1014-awsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1149-gcp-fipsUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-awsUpgrade linux-image-oemUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-virtual-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1120-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-ibmUpgrade linux-image-gke-6.8Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04 | May 20, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub