In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: configfs: Fix OOB read on empty string write
When writing an empty string to either 'qw_sign' or 'landingPage' sysfs attributes, the store functions attempt to access page[l - 1] before validating that the length 'l' is greater than zero.
This patch fixes the vulnerability by adding a check at the beginning of os_desc_qw_sign_store() and webusb_landingPage_store() to handle the zero-length input case gracefully by returning immediately.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 31, 2025 | Jul 31, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-socionextUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade dtb-appleUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade kernel-preempt-develUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade dtb-exynosUpgrade reiserfs-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade kernel-sourceUpgrade dtb-amazonUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade kernel-64kbUpgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade kernel-debug-develUpgrade kernel-kvmsmallUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-azureUpgrade dtb-apmUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade dtb-sprdUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade kernel-syms-azureUpgrade kernel-preemptUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade dtb-nvidia | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-azureUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-azure-6.14Upgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gke-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-realtimeUpgrade linux-image-generic-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-virtual-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-ibm-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-oem-6.14Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-gkeop-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-generic-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-virtualUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-kvm-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-xilinxUpgrade linux-image-aws-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-aws-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-oem-24.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-azure-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-oem-22.04a | Jul 31, 2025 | Jul 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Jul 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub