In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: validate USB endpoints The kalmia driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not have the same urbs the driver will crash later on when it blindly accesses these endpoints.
En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: net: usb: kalmia: validar puntos finales USB El controlador kalmia debería validar que el dispositivo que está sondeando tiene el número y los tipos adecuados de puntos finales USB que espera antes de que se vincule a él. Si un dispositivo malicioso no tuviera los mismos urbs, el controlador fallará más tarde cuando acceda ciegamente a estos puntos finales.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x702bdd604400> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x702b83bb8840> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x702b83bb96c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x702bdd1501c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x702bdd605640> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x702bdd605dc0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x702b83bbac00> | Operating System |
| linux | linux_kernel | 3.0 | <built-in method update of dict object at 0x702b83bb8380> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x702bdd607cc0> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x702bdd606700> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x702b83bb9b00> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x702b83bb8b00> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x702bdd604980> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x702bdd607e80> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x702bde4f2bc0> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:3.0:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:* |