In the Linux kernel, the following vulnerability has been resolved: net: usb: kaweth: validate USB endpoints The kaweth driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not have the same urbs the driver will crash later on when it blindly accesses these endpoints.
En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: net: usb: kaweth: validar los puntos finales USB El controlador kaweth debería validar que el dispositivo que está sondeando tiene el número y los tipos adecuados de puntos finales USB que espera antes de vincularse a él. Si un dispositivo malicioso no tuviera los mismos urbs, el controlador se bloqueará más adelante cuando acceda ciegamente a estos puntos finales.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36948cf80> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd38677f2c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd340144300> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36ab5c240> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36948c440> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36948c980> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36b3f92c0> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7fd34948da40> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7fd319c75740> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7fd36948cc80> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7fd38677d980> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7fd36b3bcac0> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7fd36a02d300> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* |