In the Linux kernel, the following vulnerability has been resolved:
usbnet: gl620a: fix endpoint checking in genelink_bind()
Syzbot reports [1] a warning in usb_submit_urb() triggered by inconsistencies between expected and actually present endpoints in gl620a driver. Since genelink_bind() does not properly verify whether specified eps are in fact provided by the device, in this case, an artificially manufactured one, one may get a mismatch.
Fix the issue by resorting to a usbnet utility function usbnet_get_endpoints(), usually reserved for this very problem. Check for endpoints and return early before proceeding further if any are missing.
[1] Syzbot report: usb 5-1: Manufacturer: syz usb 5-1: SerialNumber: syz usb 5-1: config 0 descriptor?? gl620a 5-1:0.23 usb0: register 'gl620a' at usb-dummy_hcd.0-1, ... ------------[ cut here ]------------ usb 5-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 2 PID: 1841 at drivers/usb/core/urb.c:503 usb_submit_urb+0xe4b/0x1730 drivers/usb/core/urb.c:503 Modules linked in: CPU: 2 UID: 0 PID: 1841 Comm: kworker/2:2 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: mld mld_ifc_work RIP: 0010:usb_submit_urb+0xe4b/0x1730 drivers/usb/core/urb.c:503 ... Call Trace: <TASK> usbnet_start_xmit+0x6be/0x2780 drivers/net/usb/usbnet.c:1467 __netdev_start_xmit include/linux/netdevice.h:5002 [inline] netdev_start_xmit include/linux/netdevice.h:5011 [inline] xmit_one net/core/dev.c:3590 [inline] dev_hard_start_xmit+0x9a/0x7b0 net/core/dev.c:3606 sch_direct_xmit+0x1ae/0xc30 net/sched/sch_generic.c:343 __dev_xmit_skb net/core/dev.c:3827 [inline] __dev_queue_xmit+0x13d4/0x43e0 net/core/dev.c:4400 dev_queue_xmit include/linux/netdevice.h:3168 [inline] neigh_resolve_output net/core/neighbour.c:1514 [inline] neigh_resolve_output+0x5bc/0x950 net/core/neighbour.c:1494 neigh_output include/net/neighbour.h:539 [inline] ip6_finish_output2+0xb1b/0x2070 net/ipv6/ip6_output.c:141 __ip6_finish_output net/ipv6/ip6_output.c:215 [inline] ip6_finish_output+0x3f9/0x1360 net/ipv6/ip6_output.c:226 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip6_output+0x1f8/0x540 net/ipv6/ip6_output.c:247 dst_output include/net/dst.h:450 [inline] NF_HOOK include/linux/netfilter.h:314 [inline] NF_HOOK include/linux/netfilter.h:308 [inline] mld_sendpack+0x9f0/0x11d0 net/ipv6/mcast.c:1819 mld_send_cr net/ipv6/mcast.c:2120 [inline] mld_ifc_work+0x740/0xca0 net/ipv6/mcast.c:2651 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.235-227.919Upgrade kernelUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | May 22, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Jun 13, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Jul 21, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Jul 1, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Suse | — | Upgrade kernel-rtUpgrade kernel-default-develUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade kernel-64kbUpgrade dtb-exynosUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-64kbUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-develUpgrade kernel-default-optionalUpgrade dtb-alteraUpgrade dtb-lgUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade kernel-rt_debugUpgrade kernel-default-manUpgrade kernel-debug-develUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-debugUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade dtb-sprdUpgrade kernel-azure-extra | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1144-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-azure-fde-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-5.4.0-216-generic-lpaeUpgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-azureUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-awsUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1089-azureUpgrade linux-image-aws-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-5.4.0-1151-azure-fipsUpgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1146-aws-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-140-genericUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-5.4.0-1064-xilinx-zynqmpUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-85-genericUpgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-5.4.0-1120-fipsUpgrade linux-image-5.4.0-1151-azureUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-6.8Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-5.4.0-1105-bluefieldUpgrade linux-image-5.4.0-1051-iotUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-virtual-6.8Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.8.0-1038-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-fipsUpgrade linux-image-bluefieldUpgrade linux-image-azure-nvidiaUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-5.4.0-216-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.4.0-1092-ibmUpgrade linux-image-5.4.0-1149-gcpUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-raspi2Upgrade linux-image-6.11.0-1014-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-oemUpgrade linux-image-5.4.0-1149-gcp-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-6.8.0-1039-awsUpgrade linux-image-5.4.0-1133-kvmUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-5.4.0-1146-awsUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-6.8.0-84-genericUpgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intelUpgrade linux-image-aws-fipsUpgrade linux-image-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeopUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-216-genericUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64kUpgrade linux-image-azure-6.8 | May 20, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub