In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: validate USB endpoints The kalmia driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not have the same urbs the driver will crash later on when it blindly accesses these endpoints.
En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: net: usb: kalmia: validar puntos finales USB El controlador kalmia debería validar que el dispositivo que está sondeando tiene el número y los tipos adecuados de puntos finales USB que espera antes de que se vincule a él. Si un dispositivo malicioso no tuviera los mismos urbs, el controlador fallará más tarde cuando acceda ciegamente a estos puntos finales.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23bea8a280> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d239fbdf740> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d242455f240> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23bea8bd40> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d242455e9c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d242455d4c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d2424534380> | Operating System |
| linux | linux_kernel | 3.0 | <built-in method update of dict object at 0x7d242455e240> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d2424534800> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d242455c840> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d242455c580> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d2424534dc0> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d24245ba000> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d242455db40> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d242455da80> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:3.0:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:* |