The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
Syzbot[1] has detected a stack-out-of-bounds read of the ep_addr array from hid-thrustmaster driver. This array is passed to usb_check_int_endpoints function from usb.c core driver, which executes a for loop that iterates over the elements of the passed array. Not finding a null element at the end of the array, it tries to read the next, non-existent element, crashing the kernel.
To fix this, a 0 element was added at the end of the array to break the for loop.
[1] https://syzkaller.appspot.com/bug?extid=9c9179ac46169c56c1ad
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Mar 17, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade dtb-marvellUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-broadcomUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-default-extraUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-debugUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debugUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade kernel-azure-extraUpgrade kernel-syms-rtUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-rt_debug-develUpgrade dtb-rockchipUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-allwinnerUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extra | Apr 9, 2025 | Feb 27, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub