In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: validate USB endpoints The pegasus driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not have the same urbs the driver will crash later on when it blindly accesses these endpoints.
En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: net: usb: pegasus: validar puntos finales USB El controlador pegasus debería validar que el dispositivo que está sondeando tiene el número y tipos adecuados de puntos finales USB que espera antes de que se vincule a él. Si un dispositivo malicioso no tuviera los mismos urbs, el controlador fallará más tarde cuando acceda ciegamente a estos puntos finales.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23af2bd6c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23bea791c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23645919c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23bea89680> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23af2bc300> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d2424670ec0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d2364592b80> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7d24245b9100> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7d24245b9300> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7d242438a080> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7d23af2be980> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7d23af2bd700> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d23af202d40> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* |