Rapid7 Vulnerability & Exploit Database

Rocky Linux: CVE-2022-48866: kernel-rt (RLSA-2024-7001)

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

Rocky Linux: CVE-2022-48866: kernel-rt (RLSA-2024-7001)

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
07/16/2024
Created
10/03/2024
Added
10/02/2024
Modified
10/02/2024

Description

In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts Syzbot reported an slab-out-of-bounds Read in thrustmaster_probe() bug. The root case is in missing validation check of actual number of endpoints. Code should not blindly access usb_host_interface::endpoint array, since it may contain less endpoints than code expects. Fix it by adding missing validaion check and print an error if number of endpoints do not match expected number

Solution(s)

  • rocky-upgrade-kernel-rt
  • rocky-upgrade-kernel-rt-core
  • rocky-upgrade-kernel-rt-debug
  • rocky-upgrade-kernel-rt-debug-core
  • rocky-upgrade-kernel-rt-debug-debuginfo
  • rocky-upgrade-kernel-rt-debug-devel
  • rocky-upgrade-kernel-rt-debug-kvm
  • rocky-upgrade-kernel-rt-debug-modules
  • rocky-upgrade-kernel-rt-debug-modules-extra
  • rocky-upgrade-kernel-rt-debuginfo
  • rocky-upgrade-kernel-rt-debuginfo-common-x86_64
  • rocky-upgrade-kernel-rt-devel
  • rocky-upgrade-kernel-rt-kvm
  • rocky-upgrade-kernel-rt-modules
  • rocky-upgrade-kernel-rt-modules-extra

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;