Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes A bad USB device is able to construct a service connection response message with target endpoint being ENDPOINT0 which is reserved for HTC_CTRL_RSVD_SVC and should not be modified to be used for any other services. Reject such service connection responses. Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
fb9987d0f748c983bb795a86f47522313f701a08 to < db8df00cd6d801b3abdb145201c2bdd1c665f585affectedfb9987d0f748c983bb795a86f47522313f701a08 to < 9e3031eea2d45918dc44cbfc6a6029e82882916faffectedfb9987d0f748c983bb795a86f47522313f701a08 to < 4dc3560561a08842b4a4c07ccc5a90e5067dbb5baffectedfb9987d0f748c983bb795a86f47522313f701a08 to < 1044187e7249073f719ebbf9e5ffb4f16f99e555affectedfb9987d0f748c983bb795a86f47522313f701a08 to < 95b4b940f0fb2873dcedad81699e869eb7581c85affectedfb9987d0f748c983bb795a86f47522313f701a08 to < 09740fa9827cfbaf23ecd041e602a426f99be888affectedfb9987d0f748c983bb795a86f47522313f701a08 to < 6a444dffb75238c47d2d852f12cf53f12ad2cba8affectedfb9987d0f748c983bb795a86f47522313f701a08 to < be2a546c30fe8d72efa032bee612363bb75314bdaffectedfb9987d0f748c983bb795a86f47522313f701a08 to < 061b0cb9327b80d7a0f63a33e7c3e2a91a71f142affected
Linux Linux
Default version status: affected
2.6.35affected0 to < 2.6.35unaffected4.14.322 to ≤ 4.14.*unaffected4.19.291 to ≤ 4.19.*unaffected5.4.251 to ≤ 5.4.*unaffected5.10.188 to ≤ 5.10.*unaffected5.15.121 to ≤ 5.15.*unaffected6.1.39 to ≤ 6.1.*unaffected6.3.13 to ≤ 6.3.*unaffected6.4.4 to ≤ 6.4.*unaffected6.5 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/db8df00cd6d801b3abdb145201c2bdd1c665f585 ↗
- https://git.kernel.org/stable/c/9e3031eea2d45918dc44cbfc6a6029e82882916f ↗
- https://git.kernel.org/stable/c/4dc3560561a08842b4a4c07ccc5a90e5067dbb5b ↗
- https://git.kernel.org/stable/c/1044187e7249073f719ebbf9e5ffb4f16f99e555 ↗
- https://git.kernel.org/stable/c/95b4b940f0fb2873dcedad81699e869eb7581c85 ↗
- https://git.kernel.org/stable/c/09740fa9827cfbaf23ecd041e602a426f99be888 ↗
- https://git.kernel.org/stable/c/6a444dffb75238c47d2d852f12cf53f12ad2cba8 ↗
- https://git.kernel.org/stable/c/be2a546c30fe8d72efa032bee612363bb75314bd ↗
- https://git.kernel.org/stable/c/061b0cb9327b80d7a0f63a33e7c3e2a91a71f142 ↗