In the Linux kernel, the following vulnerability has been resolved:
usb: potential integer overflow in usbg_make_tpg()
The variable tpgt in usbg_make_tpg() is defined as unsigned long and is assigned to tpgt->tport_tpgt, which is defined as u16. This may cause an integer overflow when tpgt is greater than USHRT_MAX (65535). I haven't tried to trigger it myself, but it is possible to trigger it by calling usbg_make_tpg() with a large value for tpgt.
I modified the type of tpgt to match tpgt->tport_tpgt and adjusted the relevant code accordingly.
This patch is similar to commit 59c816c1f24d ("vhost/scsi: potential memory corruption").
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Dec 29, 2025 | Dec 29, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-xilinxUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-fipsUpgrade linux-image-oracleUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-fips-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-ibmUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-genericUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-oracle-64kUpgrade linux-image-gke-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-ibm-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-lts-24.04 | Jan 6, 2026 | Dec 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 24, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub