In the Linux kernel, the following vulnerability has been resolved:
usb: potential integer overflow in usbg_make_tpg()
The variable tpgt in usbg_make_tpg() is defined as unsigned long and is assigned to tpgt->tport_tpgt, which is defined as u16. This may cause an integer overflow when tpgt is greater than USHRT_MAX (65535). I haven't tried to trigger it myself, but it is possible to trigger it by calling usbg_make_tpg() with a large value for tpgt.
I modified the type of tpgt to match tpgt->tport_tpgt and adjusted the relevant code accordingly.
This patch is similar to commit 59c816c1f24d ("vhost/scsi: potential memory corruption").
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Dec 29, 2025 | Dec 29, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-intel-iotgUpgrade linux-image-gke-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-xilinx-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-raspi-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-gcpUpgrade linux-image-fips-6.8Upgrade linux-image-aws | Jan 6, 2026 | Dec 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 24, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub