Description
In the Linux kernel, the following vulnerability has been resolved: usb: fix various gadgets null ptr deref on 10gbps cabling. This avoids a null pointer dereference in f_{ecm,eem,hid,loopback,printer,rndis,serial,sourcesink,subset,tcm} by simply reusing the 5gbps config for 10gbps.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
eaef50c760576bca70b87fdc26eb87a3660529f8 to < beb1e67a5ca8d69703c776db9000527f44c0c93caffectedeaef50c760576bca70b87fdc26eb87a3660529f8 to < 8cd5f45c1b769e3e9e0f4325dd08b6c3749dc7eeaffectedeaef50c760576bca70b87fdc26eb87a3660529f8 to < 10770d2ac0094b053c8897d96d7b2737cd72f7c5affectedeaef50c760576bca70b87fdc26eb87a3660529f8 to < b4903f7fdc484628d0b8022daf86e2439d3ab4dbaffectedeaef50c760576bca70b87fdc26eb87a3660529f8 to < 4b289a0f3033f465b4fd51ba995251a7867a2aa2affectedeaef50c760576bca70b87fdc26eb87a3660529f8 to < f17aae7c4009160f0630a91842a281773976a5bcaffectedeaef50c760576bca70b87fdc26eb87a3660529f8 to < 90c4d05780d47e14a50e11a7f17373104cd47d25affected
Linux Linux
Default version status: affected
4.6affected0 to < 4.6unaffected4.9.273 to ≤ 4.9.*unaffected4.14.237 to ≤ 4.14.*unaffected4.19.195 to ≤ 4.19.*unaffected5.4.126 to ≤ 5.4.*unaffected5.10.44 to ≤ 5.10.*unaffected5.12.11 to ≤ 5.12.*unaffected5.13 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/beb1e67a5ca8d69703c776db9000527f44c0c93c ↗
- https://git.kernel.org/stable/c/8cd5f45c1b769e3e9e0f4325dd08b6c3749dc7ee ↗
- https://git.kernel.org/stable/c/10770d2ac0094b053c8897d96d7b2737cd72f7c5 ↗
- https://git.kernel.org/stable/c/b4903f7fdc484628d0b8022daf86e2439d3ab4db ↗
- https://git.kernel.org/stable/c/4b289a0f3033f465b4fd51ba995251a7867a2aa2 ↗
- https://git.kernel.org/stable/c/f17aae7c4009160f0630a91842a281773976a5bc ↗
- https://git.kernel.org/stable/c/90c4d05780d47e14a50e11a7f17373104cd47d25 ↗