In the Linux kernel, the following vulnerability has been resolved:
HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
Syzbot[1] has detected a stack-out-of-bounds read of the ep_addr array from hid-thrustmaster driver. This array is passed to usb_check_int_endpoints function from usb.c core driver, which executes a for loop that iterates over the elements of the passed array. Not finding a null element at the end of the array, it tries to read the next, non-existent element, crashing the kernel.
To fix this, a 0 element was added at the end of the array to break the for loop.
[1] https://syzkaller.appspot.com/bug?extid=9c9179ac46169c56c1ad
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Mar 17, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade reiserfs-kmp-rtUpgrade dtb-armUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade dlm-kmp-azureUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade kernel-rtUpgrade kselftests-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade kernel-debugUpgrade dtb-amdUpgrade dtb-exynosUpgrade dtb-appleUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-alteraUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-64kbUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade dtb-apmUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade kernel-devel-azureUpgrade kernel-source | Apr 9, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub