In the Linux kernel, the following vulnerability has been resolved:
usb: class: cdc-wdm: fix reordering issue in read code path
Quoting the bug report:
Due to compiler optimization or CPU out-of-order execution, the desc->length update can be reordered before the memmove. If this happens, wdm_read() can see the new length and call copy_to_user() on uninitialized memory. This also violates LKMM data race rules [1].
Fix it by using WRITE_ONCE and memory barriers.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.204-143.230Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.253-252.1015Upgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade perf | May 24, 2026 | May 24, 2026 |
| Debian | — | Upgrade linux | May 10, 2026 | May 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 8, 2026 |
| Ubuntu | — | Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-gke-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-xilinxUpgrade linux-image-generic-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04cUpgrade linux-image-fips-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-raspiUpgrade linux-image-azure-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-fipsUpgrade linux-image-genericUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-azureUpgrade linux-image-gcp-fipsUpgrade linux-image-gkeopUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-aws-6.8Upgrade linux-image-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-kvm-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-kvmUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-gkeUpgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1061-awsUpgrade linux-image-virtualUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-realtime-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-azure-fde-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-raspi-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-64k | Jul 20, 2026 | May 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 12, 2026 | May 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub