Description
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed_udc: validate endpoint index for ast udc We should verify the bound of the array to assure that host may not manipulate the index to point past endpoint array. Found by static analysis.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
055276c1320564b0192b3af323b8cc67f9b665e1 to < 31bd4fab49c0adc6228848357c1b1df9395858afaffected055276c1320564b0192b3af323b8cc67f9b665e1 to < b2a50ffdd1a079869a62198a8d1441355c513c7caffected055276c1320564b0192b3af323b8cc67f9b665e1 to < 6fe9ca2ca389114c8da66e534c18273497843e8aaffected055276c1320564b0192b3af323b8cc67f9b665e1 to < ee0d382feb44ec0f445e2ad63786cd7f3f6a8199affected
Linux Linux
Default version status: affected
6.0affected0 to < 6.0unaffected6.1.110 to ≤ 6.1.*unaffected6.6.51 to ≤ 6.6.*unaffected6.10.10 to ≤ 6.10.*unaffected6.11 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/31bd4fab49c0adc6228848357c1b1df9395858af ↗
- https://git.kernel.org/stable/c/b2a50ffdd1a079869a62198a8d1441355c513c7c ↗
- https://git.kernel.org/stable/c/6fe9ca2ca389114c8da66e534c18273497843e8a ↗
- https://git.kernel.org/stable/c/ee0d382feb44ec0f445e2ad63786cd7f3f6a8199 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗