In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: Check for unset descriptor Make sure the descriptor has been set before looking at maxpacket. This fixes a null pointer panic in this case. This may happen if the gadget doesn't properly set up the endpoint for the current speed, or the gadget descriptors are malformed and the descriptor for the speed/endpoint are not found. No current gadget driver is known to have this problem, but this may cause a hard-to-find bug during development of new gadgets.
En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: gadget: core: Comprobar si hay un descriptor no configurado Asegúrese de que el descriptor se haya configurado antes de consultar maxpacket. Esto soluciona un error de puntero nulo en este caso. Esto puede suceder si el gadget no configura correctamente el endpoint para la velocidad actual, o si los descriptores del gadget están mal formados y no se encuentra el descriptor para la velocidad/endpoint. No se conoce ningún controlador de gadget actual que tenga este problema, pero puede causar un error difícil de encontrar durante el desarrollo de nuevos gadgets.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-476
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd340f24b40> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36b9cfc40> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd30864d700> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd342c7d700> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd39f963e00> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd39c435480> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd30864ca40> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd38542e800> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd39f90bcc0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd30864c580> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd289cee680> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd2983c4d80> | Operating System |
| linux | linux_kernel | 6.11 | <built-in method update of dict object at 0x7fd30864df40> | Operating System |
| linux | linux_kernel | 6.11 | <built-in method update of dict object at 0x7fd38547ecc0> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:* |